Privacy Policy — How phpopular Protects Your Data

1 Introduction

This Privacy Policy ("Policy") describes how phpopular ("phpopular," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of players and visitors ("you" or "your") who access or use the phpopular website at https://phpopular.one and all associated services, games, and features (collectively, the "Platform").

phpopular is committed to protecting the privacy and personal data of all Filipino players in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and all issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on phpopular, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to close your account.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, phpopular is the Personal Information Controller responsible for the personal data collected through the Platform. phpopular determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out in compliance with applicable Philippine data privacy laws and regulations.

phpopular has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact our DPO directly for any privacy-related concerns at [email protected].

3 Data We Collect

phpopular collects the following categories of personal data from players and Platform visitors. We collect only the data that is necessary for the purposes described in this Policy.

4 How We Collect Your Data

phpopular collects your personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 11 for more details on our cookie practices.
• Third-Party Sources: Identity verification data from KYC service providers; fraud and risk data from payment processors; publicly available information from Philippine government databases where permitted by law.
• Gaming Activity: Data generated automatically through your use of phpopular's games, including bet history, session data, and responsible gaming tool usage.

5 How We Use Your Data

phpopular uses your personal data for the following purposes:

• Account Management: Creating and maintaining your phpopular player account, verifying your identity and age, and managing your account settings and preferences.
• Service Delivery: Providing access to phpopular's games, processing deposits and withdrawals, crediting bonuses, and delivering customer support.
• Legal and Regulatory Compliance: Fulfilling our obligations under Philippine gaming regulations, the Data Privacy Act of 2012, the Anti-Money Laundering Act, and all other applicable Philippine laws. This includes conducting KYC verification, filing mandatory reports, and cooperating with regulatory authorities including PAGCOR and the AMLC.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorized account access, and other security threats to the Platform and its players.
• Responsible Gaming: Monitoring gaming patterns to identify potentially problematic behavior, administering responsible gaming tools such as deposit limits and self-exclusion, and fulfilling our duty of care to players.
• Platform Improvement: Analyzing aggregated and anonymized usage data to improve the performance, features, and user experience of the phpopular Platform.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw this consent at any time.
• Dispute Resolution: Investigating and resolving disputes, complaints, and legal claims relating to your phpopular account or gaming activity.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, phpopular processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — that is, to provide the phpopular gaming services you have registered for, including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with our obligations under Philippine law, including gaming regulations, anti-money laundering laws, tax laws, and data privacy regulations.
• Legitimate Interests: Processing carried out for phpopular's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

phpopular does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC and Identity Verification Providers: Third-party identity verification services engaged by phpopular to conduct KYC checks as required by Philippine gaming and anti-money laundering regulations.
• Game Software Providers: Third-party game developers and live casino operators whose games are available on the phpopular Platform. These providers receive only the technical data necessary to deliver their games.
• Regulatory and Law Enforcement Authorities: Philippine government agencies including PAGCOR, the AMLC, the NPC, and law enforcement authorities, where disclosure is required by law, court order, or regulatory instruction.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by phpopular, subject to strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of phpopular's business or assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

8 International Data Transfers

Some of phpopular's service providers and game software partners may be located outside the Philippines. Where your personal data is transferred to a country outside the Philippines, phpopular ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and NPC regulations.

Such safeguards may include contractual data processing agreements incorporating the NPC's standard contractual clauses, adequacy determinations, or other legally recognized transfer mechanisms. phpopular will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without your explicit consent or a valid legal basis.

9 Data Retention

phpopular retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your active phpopular account, plus a minimum of five (5) years following account closure, as required by Philippine gaming and anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act and its implementing rules.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.
• Support Communications: Retained for two (2) years from the date of the communication, unless related to an ongoing dispute.

Upon expiry of the applicable retention period, phpopular will securely delete or anonymize your personal data in accordance with our data disposal procedures. Anonymized data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

10 Security Measures

phpopular implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and phpopular's servers is encrypted using TLS 1.3 protocol.
• Encryption at Rest: Sensitive personal data and financial information stored on phpopular's systems is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to phpopular personnel and authorized service providers who have a legitimate need to access it. All access is logged and audited.
• Two-Factor Authentication: phpopular offers two-factor authentication (2FA) for player accounts and requires it for all internal administrative access to systems containing personal data.
• Regular Security Audits: phpopular conducts regular penetration testing, vulnerability assessments, and security audits of its systems and infrastructure.
• Staff Training: All phpopular personnel with access to personal data receive regular data privacy and security training.
• Incident Response: phpopular maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, phpopular will notify the NPC and affected players within the timeframes required by the Data Privacy Act of 2012.

11 Cookies & Tracking Technologies

phpopular uses cookies and similar technologies (such as web beacons and local storage) on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and improve your experience on phpopular.

phpopular uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in, security cookies that protect against fraud, and cookies that remember your language and currency preferences. These cookies cannot be disabled.
• Performance and Analytics Cookies: Used to collect anonymized information about how players use the Platform, such as which pages are visited most frequently and whether error messages are received. This data helps phpopular improve the Platform. These cookies require your consent.
• Functional Cookies: Used to remember choices you make on the Platform, such as your preferred game view or responsible gaming settings. These cookies enhance your experience but are not strictly necessary.

phpopular does not use third-party advertising cookies or behavioral tracking cookies that monitor your activity across other websites. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

12 Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phpopular. To exercise any of these rights, please contact our Data Protection Officer at [email protected].

phpopular will respond to all data rights requests within thirty (30) calendar days of receipt, as required by the Data Privacy Act of 2012. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified accordingly.

13 Minors and Age Restriction

The phpopular Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. phpopular does not knowingly collect personal data from individuals under the age of 21.

phpopular employs age verification procedures during account registration and KYC verification to prevent underage access to the Platform. If phpopular becomes aware that personal data has been collected from an individual under the age of 21, we will immediately close the relevant account, forfeit any associated balances, and securely delete the personal data in question.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to phpopular, please contact us immediately at [email protected] so that we can take appropriate action.

14 Changes to This Policy

phpopular reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

Where changes are material, phpopular will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Policy periodically to stay informed about how phpopular protects your personal data. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy.

15 Contact Us & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or phpopular's handling of your personal data, please contact our Data Protection Officer:

If you are not satisfied with phpopular's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available on the NPC's official website.

phpopular takes all privacy complaints seriously and will work diligently to resolve your concerns in a fair and timely manner. Our Filipino-speaking support team is available around the clock to assist players from Manila, Cebu, Davao, Quezon City, Makati, and all across the Philippines.