py2ph Privacy Policy

py2ph is an online gaming platform operating at py2ph.app, offering casino games, live dealer tables, slots, bingo, and other gaming products to eligible players in the Philippines. py2ph operates under the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), py2ph acts as the Personal Information Controller (PIC) with respect to the personal data of its registered players and website visitors. This means py2ph determines the purposes and means by which your personal data is processed.

Our designated Data Protection Officer (DPO) can be reached at [email protected]. The DPO is responsible for overseeing py2ph's data protection practices and serving as the primary point of contact for data privacy concerns.

py2ph collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify the 21+ age requirement)
• Valid Philippine mobile number
• Email address
• Residential address in the Philippines (e.g., Metro Manila, Cebu, Davao, Quezon City, Makati)
• Government-issued ID details (passport, driver's license, PhilSys ID, or UMID)

2.2 Financial Data

• GCash account number or PayMaya account details
• BPI, BDO, Metrobank, or other bank account details used for deposits and withdrawals
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps
• Source of funds documentation (where required for KYC or AML compliance)

2.3 Gaming Activity Data

• Game history, including games played, wagers placed, and outcomes
• Session duration and frequency of play
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

2.4 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Unique device identifiers
• Login timestamps and session activity logs

2.5 Communications Data

• Records of your communications with py2ph support (live chat transcripts, email correspondence)
• Survey responses and feedback submitted to py2ph
• Marketing preferences and opt-in/opt-out records

py2ph collects personal data through the following channels:

• Direct registration: Information you provide when creating your py2ph account, including your name, date of birth, contact details, and payment method.
• KYC verification: Identity documents and supporting materials you submit during the Know Your Customer verification process.
• Transactions: Financial data generated when you make deposits or request withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, or PESONet.
• Platform usage: Data automatically generated as you navigate and interact with the py2ph website and games, including through cookies and similar tracking technologies.
• Support interactions: Information you share when contacting py2ph's customer support team via live chat or email.
• Third-party verification services: Identity verification and fraud prevention data from authorized third-party KYC and AML service providers.

py2ph uses your personal data only for specific, legitimate purposes. The table below summarizes the primary purposes and the data categories involved:

py2ph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

Under the Data Privacy Act of 2012, py2ph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to when registering — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws. This includes KYC verification, AML transaction monitoring, and regulatory reporting.
• Legitimate interests: Processing necessary for py2ph's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications and promotional offers, where you have given clear, informed, and freely given consent. You may withdraw this consent at any time.

py2ph does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

6.1 Service Providers

py2ph engages trusted third-party service providers who process data on our behalf under strict data processing agreements. These include:

• KYC and identity verification providers
• Payment processors and e-wallet partners (GCash, PayMaya, BPI, BDO, Metrobank)
• Game software providers and live dealer studio operators
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Fraud detection and cybersecurity service providers

All service providers are contractually bound to process your data only as instructed by py2ph and to maintain appropriate security standards.

6.2 Regulatory Authorities

py2ph is legally required to share certain data with Philippine regulatory and law enforcement authorities, including:

• PAGCOR — as the licensing and regulatory authority for py2ph's gaming operations
• Anti-Money Laundering Council (AMLC) — for covered and suspicious transaction reporting under the AMLA
• National Privacy Commission (NPC) — in the event of a data breach or upon regulatory request
• Bureau of Internal Revenue (BIR) — for tax compliance purposes where applicable
• Other law enforcement agencies where required by valid legal process

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of py2ph's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

py2ph uses cookies and similar tracking technologies to operate the platform, improve your experience, and fulfill our security and compliance obligations. The types of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics cookies: Help us understand how players use the platform so we can improve it. Data collected is aggregated and anonymized where possible.
• Security cookies: Used for fraud detection, bot prevention, and account security monitoring.

py2ph does not use third-party advertising or behavioral tracking cookies. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies may affect your ability to use the platform.

py2ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• TLS 1.3 encryption for all data in transit between your device and py2ph servers
• AES-256 encryption for sensitive data stored at rest, including ID documents and financial records
• Multi-factor authentication (MFA) available for all player accounts and mandatory for all py2ph staff with data access
• Role-based access controls ensuring that py2ph staff can only access the data necessary for their specific job functions
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• 24/7 security monitoring with automated alerts for suspicious access patterns
• Secure data centers with physical access controls, redundant power, and environmental monitoring

While py2ph takes all reasonable precautions to protect your data, no system is completely immune to security risks. You also play a role in keeping your account secure — use a strong, unique password for your py2ph account and enable two-factor authentication.

py2ph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

After the applicable retention period expires, py2ph will securely delete or anonymize your personal data. Anonymized data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by py2ph:

• Right to be informed: You have the right to know what personal data py2ph collects about you, why it is collected, and how it is used — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data py2ph holds about you, along with information about how it is processed.
• Right to rectification: If any of your personal data held by py2ph is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to py2ph's legal obligations to retain certain records.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though py2ph may be able to demonstrate compelling grounds to continue processing.
• Right to data portability: You may request that py2ph provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to lodge a complaint: If you believe py2ph has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, contact py2ph's Data Protection Officer at [email protected]. We will respond to all data rights requests within fifteen (15) business days. Some requests may require identity verification before they can be processed.

py2ph is strictly an adult gaming platform. In accordance with PAGCOR regulations and Philippine law, the minimum age to register and play on py2ph is 21 years old. py2ph does not knowingly collect personal data from any person under the age of 21.

Age verification is a mandatory step in the py2ph registration and KYC process. If py2ph discovers that personal data has been collected from a person under 21 years of age, the following actions will be taken immediately:

• The account will be suspended and access to the platform revoked.
• All personal data associated with the underage account will be securely deleted, except where retention is required by law.
• Any deposits made will be returned to the original payment method after deducting amounts already wagered.
• The incident will be reported to PAGCOR as required by regulatory guidelines.

If you are a parent or guardian and believe your child has registered on py2ph, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours.

The py2ph platform may contain links to third-party websites or services, such as payment provider portals (GCash, PayMaya) or game provider information pages. This Privacy Policy applies only to py2ph and does not cover the privacy practices of any third-party websites or services.

py2ph is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party services you access through or in connection with py2ph before providing them with your personal data.

py2ph may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, py2ph will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. The current version of this Privacy Policy is always available at py2ph.app/privacy-policy. Your continued use of the py2ph platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

If you do not agree with any changes to this Privacy Policy, you should stop using the platform and may request account closure by contacting py2ph support.

For any questions, concerns, or requests relating to this Privacy Policy or py2ph's data processing practices, please contact our Data Protection Officer:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the py2ph platform
• Response Time: All privacy-related inquiries are responded to within 15 business days

If you are not satisfied with py2ph's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012.