Privacy Policy

1Introduction

phpark is committed to protecting the privacy and security of all personal information entrusted to us by Filipino players. This Privacy Policy governs the collection, use, processing, and disclosure of personal data when you access or interact with the phpark website, mobile interface, games, and related services.

This Policy applies to all users of phpark, including registered account holders, visitors browsing the platform without an account, and any other person who interacts with phpark systems or communications. This Policy should be read in conjunction with the phpark Terms & Conditions, which govern your use of the platform.

phpark operates in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable Philippine data protection regulations. Where phpark processes data from users located in other jurisdictions, we comply with applicable international data protection laws to the extent they apply to our operations.

If you do not agree with any part of this Privacy Policy, you must discontinue use of the phpark platform immediately and, if applicable, close your account and request deletion of your personal data in accordance with Section 8 of this Policy.

2Information We Collect

phpark collects several categories of personal information from users in order to operate the platform, comply with legal obligations, prevent fraud, and provide a secure gaming experience. The specific types of information we collect include:

2.1 Information You Provide Directly

When you register a phpark account, make a deposit, contact customer support, or otherwise interact with the platform, you provide personal information directly to phpark, including:

• Identity Information: Full legal name, date of birth, gender, and nationality as stated on your government-issued identification documents.
• Contact Information: Email address, mobile phone number, residential address, and any other contact details you supply.
• Account Credentials: Username, password, and security questions used to access your phpark account.
• Financial Information: Payment method details such as GCash mobile number, Maya account identifier, bank account number, and transaction history. phpark does not store complete credit card numbers or CVV codes.
• Verification Documents: Government-issued ID (such as Philippine passport, driver's license, or national ID card), proof of address (utility bills, bank statements), and selfie photographs submitted for identity verification purposes.
• Communication Records: Contents of live chat conversations, email correspondence, support tickets, and any other communications you send to or receive from phpark.

2.2 Information Collected Automatically

When you access the phpark platform, certain information is collected automatically through technical means, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (such as IP address and device ID).
• Usage Data: Pages visited, games played, bet history, session duration, click patterns, and navigation paths through the platform.
• Technical Logs: Server logs, error reports, timestamps of activity, and API requests made by your device.
• Location Information: Approximate geographic location derived from your IP address. phpark does not collect precise GPS coordinates unless you explicitly grant location permissions on your mobile device.

2.3 Information from Third Parties

phpark may receive information about you from third-party service providers, including:

• Payment processors (GCash, Maya, BPI, BDO, Metrobank) who confirm transaction success and account ownership.
• Identity verification services that validate the authenticity of submitted documents and detect fraudulent identities.
• Fraud detection and anti-money laundering screening services that check your identity against national and international sanctions lists.
• Marketing and analytics partners who provide aggregated or anonymised usage statistics.

3How We Use Your Data

phpark processes your personal information for the following specific purposes, each of which is necessary to operate the platform lawfully and provide you with a secure gaming experience:

phpark does not use your personal data for automated decision-making or profiling that produces legal effects or similarly significantly affects you, except where necessary for fraud detection and responsible gaming protection — in which cases you retain the right to contest such decisions and request human review.

4Legal Basis for Processing

Under the Data Privacy Act of 2012 and applicable Philippine data protection principles, phpark relies on the following legal bases to process your personal information:

• Contractual Necessity: Processing is necessary to perform the contract between you and phpark (the Terms & Conditions) — including account registration, transaction processing, and game provision.
• Legal Obligation: Processing is required to comply with legal obligations imposed on phpark under Philippine gaming regulations, anti-money laundering laws, tax reporting requirements, and other applicable legislation.
• Consent: You have provided explicit, informed, and freely given consent for specific processing activities, such as receiving marketing communications or using optional platform features.
• Legitimate Interests: Processing is necessary for phpark's legitimate business interests — such as fraud prevention, platform security, and service improvement — provided these interests do not override your fundamental rights and freedoms.

Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time by contacting phpark support or adjusting your account settings. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

5Data Sharing & Disclosure

phpark does not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients where necessary to operate the platform and fulfil legal obligations:

5.1 Service Providers

phpark engages trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These providers include payment processors (GCash, Maya, BPI, BDO, Metrobank, GrabPay), identity verification services, cloud hosting providers, cybersecurity firms, and customer support technology vendors. All service providers are prohibited from using your data for any purpose beyond the specific service they provide to phpark.

5.2 Regulatory and Law Enforcement Authorities

phpark may disclose personal information to Philippine government agencies, regulatory bodies, law enforcement authorities, or courts when required to do so by law, lawful order, or binding governmental direction. This includes disclosures required under anti-money laundering regulations, tax laws, and gaming compliance frameworks. phpark will, where legally permissible, attempt to notify you of such disclosures.

5.3 Fraud Prevention and AML Partners

To protect the integrity of the platform and comply with anti-money laundering obligations, phpark shares identity and transaction data with fraud screening services and international sanctions list providers. Information shared for these purposes is used solely to assess risk and prevent financial crime, and is governed by strict data processing agreements.

5.4 Business Transfers

In the event that phpark undergoes a merger, acquisition, corporate restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. phpark will provide advance notice of any such transfer and the incoming entity will be bound by privacy commitments no less protective than those in this Policy.

6Data Retention

phpark retains your personal information for as long as is necessary to fulfil the purposes for which it was collected, comply with legal retention obligations, resolve disputes, and enforce our agreements. The general retention periods we apply are as follows:

Upon expiry of the applicable retention period, phpark will securely delete or anonymise your personal data such that it can no longer be attributed to you. Note that data subject to active legal proceedings, regulatory investigations, or unresolved disputes may be retained beyond the standard retention periods until those matters are concluded.

7Security Measures

phpark employs industry-standard technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport Layer Security (TLS): All data transmitted between your device and phpark servers is encrypted using 256-bit TLS encryption, preventing interception by third parties.
• Data Encryption at Rest: Sensitive personal data stored in phpark databases is encrypted using AES-256 encryption, ensuring that data remains protected even in the event of a physical storage breach.
• Two-Factor Authentication (2FA): phpark offers and encourages the use of two-factor authentication on all registered accounts to prevent unauthorised access.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. phpark staff are granted access only to the data necessary to perform their specific job functions, and all access is logged and audited.
• Penetration Testing: phpark regularly engages independent cybersecurity firms to conduct penetration testing, vulnerability assessments, and security audits of platform infrastructure.
• Incident Response: phpark maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected users within the timeframes required under Philippine law.
• Staff Training: All phpark personnel who handle personal data undergo regular data privacy training and are bound by confidentiality obligations under their employment agreements.

8Your Privacy Rights

Under the Data Privacy Act of 2012 and applicable Philippine regulations, you have the following rights with respect to the personal data phpark holds about you:

• Right to Be Informed: You have the right to know what personal data phpark collects about you, how it is used, and with whom it is shared. This Privacy Policy is phpark's primary instrument for fulfilling this obligation.
• Right of Access: You may request a copy of the personal data phpark holds about you at any time. phpark will provide this information within 30 days of receiving a valid request, subject to verification of your identity.
• Right to Rectification: If any personal data phpark holds about you is inaccurate, incomplete, or outdated, you have the right to request correction. You may update basic account information directly through your phpark account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing was unlawful. Note that this right is subject to phpark's legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your rights and interests override those of phpark.
• Right to Data Portability: Where processing is carried out by automated means and is based on your consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: If you believe phpark has processed your personal data in violation of applicable law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact the phpark Data Privacy Officer using the details in Section 14. phpark will acknowledge your request within 5 business days and provide a substantive response within 30 days. Complex requests may require an extension, of which you will be notified.

9Cookies & Tracking Technologies

phpark uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse how users interact with phpark. The categories of cookies we use are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the phpark platform to function and cannot be disabled. They include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your cookie consent choices. No opt-out is available for strictly necessary cookies.

9.2 Functional Cookies

Functional cookies allow phpark to remember your preferences and personalise your experience, such as your preferred language, game display settings, and whether you have dismissed certain in-platform notifications. These cookies do not track you across other websites.

9.3 Analytics Cookies

phpark uses analytics cookies to collect aggregated, anonymised data about how users navigate the platform — including pages visited, games played, session duration, and error rates. This data is used solely to improve platform performance and user experience. Analytics data is not used to identify individual users.

9.4 Managing Your Cookie Preferences

You may manage non-essential cookie preferences through the phpark cookie settings panel, accessible from the platform footer. You may also configure your browser to block or delete cookies; however, doing so may affect the functionality of the phpark platform, including your ability to stay logged in and access games correctly.

10Third-Party Services

The phpark platform integrates with third-party services to deliver certain features, including payment processing, game content, identity verification, and analytics. When you interact with these integrated services, your data may be processed by the relevant third-party provider under their own privacy policies.

phpark carefully selects third-party partners and requires them to implement data protection standards consistent with applicable Philippine law. All third-party data processors engaged by phpark operate under formal data processing agreements that restrict their use of your data to the specific services they provide to phpark.

phpark is not responsible for the independent data practices of third-party game studios, payment providers, or other external services that you access directly outside of the phpark platform. We encourage you to review the privacy policies of any third-party services you use independently.

11International Data Transfers

phpark's primary operations and data processing infrastructure are based in the Philippines. In some cases, personal data may be transferred to and processed in countries outside the Philippines — for example, where phpark uses cloud hosting services or third-party game providers whose servers are located in other jurisdictions.

Whenever phpark transfers personal data outside the Philippines, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law. These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission.
• Data processing agreements that impose equivalent data protection obligations on the recipient.
• Transfer to countries recognised by the National Privacy Commission as providing adequate levels of data protection.

If you would like more information about the international transfer safeguards applicable to your personal data, please contact the phpark Data Privacy Officer using the details in Section 14.

12Children's Privacy

If phpark becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to delete that data from our systems and close the associated account. If you believe that a minor has registered an account on phpark or that phpark has inadvertently collected personal data from a person under 21, please contact us immediately using the details in Section 14.

phpark employs age verification measures during the registration process and reserves the right to conduct additional age verification checks at any time. Any attempt to circumvent our age controls constitutes a violation of the phpark Terms & Conditions and applicable Philippine law.

13Changes to This Policy

phpark reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The "Last updated" date at the top of this Policy indicates when the most recent revision was made.

Where changes to this Policy are material — meaning they substantively affect how we collect or use your personal data, or alter your privacy rights — phpark will provide advance notice via your registered email address and/or a prominent notice on the phpark platform, with a minimum notice period of fourteen (14) days before the changes take effect.

Non-material updates — such as typographical corrections, clarifications of existing practices, or changes required by regulatory guidance that do not alter your substantive rights — may be implemented without advance notice, with the updated Policy taking effect immediately upon publication.

Your continued use of the phpark platform following notification of material changes constitutes your acceptance of the revised Privacy Policy. If you do not accept any changes, you must cease using phpark and, if applicable, request deletion of your personal data before the effective date of the revised Policy.

14Contact & Data Privacy Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the way phpark processes your personal data, you may contact us through the following channels:

phpark will acknowledge all privacy-related requests within 5 business days and will endeavour to provide a full response within 30 days. For complex requests involving large volumes of data or requiring extensive investigation, we may extend this period by up to an additional 30 days, of which we will notify you promptly.

If you are not satisfied with phpark's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).