ppgames Privacy Policy

1 Data Controller Identity

The data controller responsible for your personal information collected through the ppgames platform is ppgames, the operator of ppgames.one, licensed by the Philippine Amusement and Gaming Corporation (PAGCOR). References to "ppgames," "we," "us," or "our" throughout this Policy refer to the ppgames platform operator.

ppgames has designated a Data Protection Officer (DPO) in compliance with the National Privacy Commission's requirements for personal information controllers. The ppgames DPO oversees compliance with the Data Privacy Act of 2012, monitors data processing activities, and serves as the primary point of contact for player data privacy inquiries. You may contact the ppgames DPO at the email address provided in Section 12 of this Policy.

2 Personal Data We Collect

ppgames collects personal data from you through multiple channels across the lifecycle of your account. The categories of personal data we collect include the following:

ppgames does not collect sensitive personal information — including racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation — except where specifically required by PAGCOR's KYC or AML compliance obligations (for example, health-related data in the context of responsible gaming assessments), in which case separate consent is obtained.

3 How ppgames Uses Your Personal Data

ppgames processes your personal data only for lawful, specified, and legitimate purposes directly related to the operation of the ppgames platform and compliance with applicable Philippine law. The primary purposes for which ppgames uses your data are as follows:

• Account creation and management: To register your ppgames account, verify your identity, maintain your account settings, and authenticate your login sessions.
• Payment processing: To process GCash, PayMaya, and bank deposits and withdrawals, reconcile transactions, and maintain financial records as required by Philippine law.
• PAGCOR regulatory compliance: To meet ppgames' obligations under its PAGCOR license, including AML reporting, age verification, responsible gaming monitoring, and submission of required player activity data to PAGCOR.
• Responsible gaming: To monitor gaming activity for signs of problem gambling behavior, apply responsible gaming tools at your request, and administer self-exclusion orders.
• Customer support: To respond to your Live Chat, email, and support ticket queries, resolve disputes, and maintain records of communications for quality assurance and compliance purposes.
• Platform security and fraud prevention: To detect and prevent unauthorized account access, bonus abuse, collusion, money laundering, and other fraudulent or prohibited activities on the ppgames platform.
• Platform improvement: To analyze aggregated, anonymized usage data for the purpose of improving platform features, game selection, and user experience for Filipino players.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates via SMS and email — only where you have provided explicit consent, and only through channels you have opted into. You may withdraw marketing consent at any time through your ppgames account settings.

4 Legal Basis for Processing Personal Data

Under the Data Privacy Act of 2012, ppgames processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and ppgames — including account creation, payment processing, game delivery, and support — is conducted on the basis of contractual necessity.
• Legal obligation: Processing required to comply with ppgames' obligations under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), and NPC requirements, is conducted on the basis of legal obligation.
• Legitimate interests: Processing for platform security, fraud prevention, and aggregated analytics is conducted on the basis of ppgames' legitimate interests, balanced against your privacy rights.
• Consent: Processing for marketing communications and optional features is conducted on the basis of your freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

5 Data Sharing and Third-Party Disclosure

ppgames does not sell, rent, or trade your personal data to third parties for their own marketing purposes. ppgames shares your personal data with third parties only in the following strictly defined circumstances:

• PAGCOR and Philippine regulatory authorities: ppgames is legally required to share player data with PAGCOR and other competent Philippine authorities as part of its licensing obligations, including AML reporting and player protection compliance. Such sharing is mandatory and cannot be restricted by your privacy settings.
• Payment processing partners: GCash (G-Xchange Inc.), PayMaya (Maya Bank), and partner Philippine banks receive the minimum personal and financial data necessary to process your deposits and withdrawals. These partners are independently regulated financial institutions subject to BSP oversight.
• Game content providers: Third-party game studios supplying content to the ppgames platform may receive anonymized or pseudonymized session data for game functionality and integrity monitoring purposes only. They do not receive your identity or contact data.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance providers engaged by ppgames may process personal data as data processors on ppgames' behalf, subject to data processing agreements compliant with the DPA.
• Law enforcement: ppgames will disclose personal data to law enforcement or judicial authorities when required by valid Philippine legal process (court order, subpoena, or similar instrument), or where disclosure is necessary to prevent or investigate suspected criminal activity including fraud and money laundering.

6 Cookies and Tracking Technologies

ppgames uses cookies and similar tracking technologies on the ppgames.one platform to support essential platform functionality, maintain your login session, and — where you have consented — to analyze platform usage patterns and personalize your experience. The categories of cookies used by ppgames are as follows:

• Essential/session cookies: Strictly necessary for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Preference cookies: Store your platform preferences such as language settings and responsible gaming display options. These are activated by your in-platform choices.
• Analytics cookies: Used to collect anonymized data on how Filipino players navigate and use the ppgames platform, enabling us to improve performance and user experience. Activated only with your consent.

You may manage cookie preferences through your browser settings or the ppgames cookie preference panel. Disabling non-essential cookies will not affect your ability to access your account or play games on the platform.

7 Data Security Measures

ppgames implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS 1.3) encryption for all data transmitted between your device and the ppgames platform.
• Encryption at rest for all personal data stored in ppgames databases, using industry-standard AES-256 encryption.
• Multi-factor authentication requirements for internal ppgames staff accessing player data systems.
• Role-based access controls limiting access to personal data to ppgames personnel with a legitimate need to process that data.
• Regular penetration testing and security audits of the ppgames platform infrastructure.
• Incident response procedures compliant with NPC breach notification requirements, including mandatory notification to the NPC within 72 hours of discovering a personal data breach that poses a real risk of harm to data subjects.

While ppgames takes all reasonable steps to protect your personal data, no digital platform is entirely immune to security incidents. You play an important role in protecting your own data by using a strong, unique password for your ppgames account and activating SMS two-factor authentication.

8 Data Retention

ppgames retains your personal data only for as long as is necessary for the purposes for which it was collected, and in compliance with applicable Philippine legal requirements. The general data retention periods applied by ppgames are as follows:

• Active account data: Retained for the duration of your ppgames account and for a period of five (5) years following permanent account closure, in compliance with PAGCOR's record-keeping requirements and the Anti-Money Laundering Act's five-year retention mandate.
• Financial transaction records: Retained for a minimum of five (5) years from the date of transaction, as required by BSP and AMLC regulations applicable to PAGCOR-licensed online gaming operators.
• Customer support communications: Retained for three (3) years from the date of the relevant interaction, for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained for the period of your active marketing consent and for three (3) years thereafter, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, ppgames will securely delete or anonymize your personal data in accordance with the NPC's guidelines on personal data disposal.

9 Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ppgames:

• Right to be informed: The right to be informed of how your personal data is being processed, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data ppgames holds about you, and information about how it is being processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. Some corrections may require submission of supporting documentation for KYC compliance purposes.
• Right to erasure/blocking: The right to request deletion or blocking of personal data that is no longer necessary, collected unlawfully, or subject to a withdrawn consent — subject to ppgames' overriding legal retention obligations under PAGCOR and AML law.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to another controller, where technically feasible.
• Right to object: The right to object to processing of your personal data for direct marketing purposes. Objection to marketing processing will be honored immediately upon receipt.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ppgames has processed your personal data in breach of the Data Privacy Act.

To exercise any of the above rights, submit a written request through the ppgames 24/7 Live Chat, or by email to the ppgames Data Protection Officer at the contact address in Section 12. ppgames will respond to data subject rights requests within fifteen (15) business days of receipt of a complete and verifiable request.

10 Children and Minors

The ppgames platform is strictly restricted to persons aged twenty-one (21) years and above. ppgames does not knowingly collect personal data from individuals under the age of 21. PAGCOR's minimum age requirement for online casino participation in the Philippines is 21 years — ppgames enforces this requirement through mandatory age verification at registration and KYC.

If ppgames becomes aware that it has inadvertently collected personal data from a person under the age of 21, ppgames will immediately suspend the relevant account, delete all associated personal data, and report the incident to PAGCOR in accordance with its licensing obligations. If you have reason to believe that a minor has registered on the ppgames platform, please notify ppgames immediately through Live Chat support.

11 Cross-Border Data Transfers

ppgames is a Philippines-focused platform. The majority of personal data processing takes place within the Philippines or in cloud infrastructure with Philippines data residency. Where ppgames engages third-party service providers that process data outside the Philippines — for example, global cybersecurity or cloud infrastructure partners — ppgames ensures that such transfers comply with the National Privacy Commission's guidelines on cross-border data transfers, including the requirement for adequate data protection safeguards in the receiving country or contractual data transfer agreements equivalent to Philippine DPA standards.

ppgames does not transfer player financial data or government-issued ID data outside the Philippines except where strictly required for PAGCOR regulatory reporting or international AML compliance obligations.

12 Contact, Updates, and NPC Complaints

For any privacy-related inquiries, data subject rights requests, or concerns about ppgames' data processing practices, please contact the ppgames Data Protection Officer:

If you are not satisfied with ppgames' response to your privacy inquiry, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. Information on NPC complaint procedures is published on the NPC's official government website.

ppgames reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the email address on their ppgames account no less than seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the ppgames platform following an update constitutes acceptance of the revised Policy.