Privacy Policy

1. Introduction

phppopular ("phppopular," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the phppopular platform ("Platform"). This Privacy Policy ("Policy") describes how phppopular collects, uses, stores, shares, and protects personal information in connection with your use of the Platform, including the phppopular website, mobile interface, games, and all related services.

This Policy is intended to comply with applicable data privacy legislation in the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. By registering an account with phppopular or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read alongside our Terms & Conditions, which are available at phppopular.org/terms-conditions and are incorporated by reference into the overall agreement between you and phppopular.

2. Personal Data We Collect

2.1 Registration Data

When you create a phppopular account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city, province, and postal code)
• Email address
• Mobile phone number
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering regulations and verify your identity, phppopular may collect:

• Government-issued photo identification (e.g., Philippine passport, driver's license, SSS/UMID card, PhilSys ID)
• Proof of residential address (e.g., utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account, bank statement)
• Selfie or live photo for identity confirmation purposes

2.3 Financial Data

When you make deposits or withdrawals on phppopular, we collect transaction records including payment method type (e.g., GCash, PayMaya, BPI, BDO, Metrobank), transaction amounts, timestamps, and reference numbers. phppopular does not store full payment card numbers or full e-wallet account credentials.

2.4 Gaming Activity Data

phppopular records your gaming activity on the Platform, including games played, wagers placed, game outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical & Device Data

When you access the phppopular platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Session timestamps and duration
• Pages visited and features used within the Platform
• Referral source (how you arrived at phppopular)

2.6 Communications Data

If you contact phppopular support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the resolution of any issues raised. This data is used to improve our support services and to maintain a record of interactions for dispute resolution purposes.

3. How We Collect Your Data

phppopular collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — through cookies, web beacons, and similar tracking technologies when you access and use the Platform.
• From third parties — including identity verification service providers, payment processors (such as GCash, PayMaya, and banking partners), and fraud prevention services, where necessary to verify your identity or process transactions.

4. How We Use Your Personal Data

phppopular uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your phppopular player account.
• Identity verification: To verify your age (21+), identity, and eligibility to use the Platform in compliance with applicable regulations.
• Transaction processing: To process deposits, withdrawals, and bonus credits to and from your phppopular account.
• Customer support: To respond to your inquiries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels.
• Legal compliance: To comply with anti-money laundering (AML) obligations, tax reporting requirements, and other applicable legal and regulatory requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, session limits, and self-exclusion.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the features, performance, and user experience of the phppopular platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.

5. Legal Basis for Processing

phppopular processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering your phppopular account, including account creation, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including the Data Privacy Act of 2012, AML regulations, and gaming regulatory requirements.
• Legitimate interests: Processing necessary for phppopular's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, such as the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

phppopular does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and subject to appropriate safeguards:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank, and other banking partners), cloud hosting providers, customer support platform providers, and analytics services. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection requirements.

6.2 Regulatory & Law Enforcement Authorities

phppopular may disclose personal data to government agencies, regulatory bodies, law enforcement authorities, or courts where required to do so by applicable law, court order, or regulatory directive. This includes disclosures required under Philippine AML regulations and gaming regulatory frameworks.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phppopular's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

6.4 With Your Consent

phppopular may share your data with other third parties where you have given your explicit consent to such sharing.

7. Cookies & Tracking Technologies

phppopular uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the phppopular website. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Used to remember your preferences and settings, such as language preferences and display options.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, helping us identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of our marketing campaigns. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phppopular platform.

8. Data Retention

phppopular retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account registration and KYC data is retained for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Gaming activity logs are retained for five (5) years for regulatory compliance and dispute resolution purposes.
• Marketing consent records are retained for the duration of your account and for three (3) years following account closure.

Where retention beyond these periods is required by law or for the establishment, exercise, or defence of legal claims, phppopular will retain the relevant data for the necessary additional period.

9. Data Security

phppopular implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phppopular platform.
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial information.
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of the Platform.
• Incident response procedures to detect, report, and address personal data breaches promptly.

While phppopular takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your own phppopular login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012 and applicable regulations, you have the following rights with respect to your personal data held by phppopular:

• Right to be informed: The right to be informed about how your personal data is collected and processed — which this Privacy Policy fulfils.
• Right of access: The right to request a copy of the personal data phppopular holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact the phppopular support team via live chat or by email at [email protected]. We will respond to all verified data rights requests within thirty (30) days.

11. Children's Privacy

The phppopular platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. phppopular does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account with phppopular, please contact our support team immediately so that we can investigate and take appropriate action.

12. Third-Party Links

The phppopular platform may contain links to third-party websites or services. This Privacy Policy applies solely to data collected by phppopular and does not cover the privacy practices of any third-party websites. phppopular is not responsible for the content or privacy practices of any linked third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

phppopular reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered players via email or an in-platform notification prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page.

Your continued use of the phppopular platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must cease using the Platform and may request account closure by contacting our support team.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phppopular handles your personal data, please contact our Data Privacy team through the following channels:

• Live Chat: Available 24/7 directly on the phppopular platform
• Email: [email protected]

We are committed to resolving all privacy-related inquiries promptly and transparently. Our team will acknowledge your request within 24 hours and provide a substantive response within 30 days, or sooner where required by law.