phperya Privacy Policy

Welcome to the phperya Privacy Policy. phperya ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at phperya.net and any associated mobile applications or related services. This Privacy Policy sets out how phperya collects, processes, stores, and protects the personal data of players who register, visit, or otherwise interact with the phperya platform.

phperya is firmly committed to safeguarding the privacy of every Filipino player on the platform. This commitment is not merely a legal formality — it reflects the reality that trust between phperya and our players depends on transparent, honest, and responsible data handling. When you share personal information with us to create an account, make a deposit, or contact our support team, you are placing trust in phperya, and we take that seriously.

This Privacy Policy applies to all personal data collected by phperya through the platform, including data provided during account registration, identity verification (KYC), financial transactions, customer support interactions, and your general use of the platform's features and games. It should be read together with the phperya Terms & Conditions and Responsible Gaming Policy.

If you are under 21 years of age, you are not permitted to use the phperya platform, and phperya does not knowingly collect personal data from individuals below this age threshold.

phperya collects only the personal data that is necessary to provide, operate, and improve the platform's services. The categories of personal data we collect include the following:

phperya does not collect sensitive personal data beyond what is strictly necessary for identity verification and regulatory compliance purposes. Where we do collect sensitive data (such as a copy of a government-issued ID), we apply enhanced security measures to its storage and processing.

phperya collects personal data through a number of channels and mechanisms, depending on how you interact with the platform:

• Account Registration: When you create a phperya account, you directly provide identity data, contact data, and initial preference settings through the registration form.
• KYC Verification: When you submit identity documents to complete the Know Your Customer (KYC) verification process, phperya collects and stores the documentation and information you upload.
• Deposits & Withdrawals: When you initiate a financial transaction through GCash, Maya, BPI, BDO, or another accepted payment method, phperya and the relevant payment processor collect financial data associated with the transaction.
• Platform Usage: When you browse the phperya website, log into your account, play games, or navigate between sections, technical data and gaming activity data are automatically collected through server logs, cookies, and similar tracking technologies.
• Customer Support: When you contact phperya via live chat or email, the content of those communications is collected and stored as communications data.
• Responsible Gaming Tools: When you configure deposit limits, session alerts, or self-exclusion settings, preference data is recorded to ensure those tools are correctly applied to your account.
• Third-Party Sources: In certain circumstances, phperya may receive data about you from third-party identity verification providers, payment processors, fraud prevention services, or regulatory authorities where permitted by applicable law.

phperya uses the personal data we collect for specific, legitimate purposes. We do not process your personal data for purposes that are incompatible with those for which it was originally collected. The primary purposes for which phperya processes your data include:

• Account Management: To create, verify, maintain, and administer your phperya player account, including authenticating your identity on each login.
• Service Provision: To provide you with access to the full range of phperya games, betting markets, and platform features, including the processing of deposits, wagers, winnings, and withdrawals in Philippine Peso.
• Identity & Age Verification: To conduct KYC checks and verify that you meet the minimum age requirement of 21 years, as mandated by Philippine gaming regulations. phperya takes underage gambling prevention seriously and uses your identity data to enforce this requirement rigorously.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the platform. phperya's security team monitors account activity and transaction patterns using automated systems and manual review processes.
• Regulatory Compliance: To comply with our legal and regulatory obligations, including anti-money laundering (AML) requirements, financial reporting obligations, and data protection law requirements under RA 10173.
• Responsible Gaming: To monitor player activity for indicators of problem gambling, to apply and enforce the responsible gaming tools you configure (such as deposit limits and self-exclusion), and to reach out proactively when concerning patterns are identified.
• Customer Support: To respond to your queries, complaints, and support requests through live chat and email, and to maintain records of those interactions for quality assurance and dispute resolution purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with phperya, identify areas for improvement, and develop new features.
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may withdraw this consent at any time by updating your notification preferences in your account settings or by contacting support.

Under the Data Privacy Act of 2012 (RA 10173), phperya processes your personal data on the basis of one or more of the following lawful grounds:

• Consent: Where you have freely given specific, informed, and unambiguous consent to the processing of your personal data for a defined purpose — such as receiving marketing communications or submitting identity documents for KYC review.
• Contractual Necessity: Where processing is necessary to perform the contract between you and phperya — namely, the Terms & Conditions — including providing platform access, processing transactions, and managing your account.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to phperya, such as anti-money laundering reporting requirements or regulatory directives.
• Legitimate Interests: Where processing is necessary for phperya's legitimate interests (or those of a third party), provided that those interests are not overridden by your privacy rights. Examples include fraud prevention, platform security, and improving service quality through analytics.

For any processing based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, please contact our support team via live chat or email.

phperya uses cookies and similar tracking technologies to operate core platform functions, maintain session security, and analyse how the platform is used. The categories of cookies phperya uses are as follows:

• Strictly Necessary Cookies: These cookies are essential for the phperya platform to function correctly. They enable core features such as account login sessions, security authentication, and shopping cart functionality (for bonus claims). These cookies cannot be disabled without materially impairing your ability to use the platform.
• Functional Cookies: These cookies allow the platform to remember your preferences — such as your chosen language (English or Tagalog), display settings, and responsible gaming tool configurations — to deliver a more personalised experience.
• Analytics Cookies: phperya uses anonymised analytics data to understand aggregate usage patterns on the platform — for example, which game categories are most popular among Filipino players, or where players encounter difficulty navigating the site. This data is used exclusively for platform improvement purposes.
• Security & Fraud Detection Cookies: These cookies assist phperya's security systems in identifying suspicious activity, detecting multiple account creation attempts, and preventing fraudulent use of the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing or using certain features of the phperya platform. phperya does not use cookies to serve third-party advertising.

phperya does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

• Payment Processors: When you make a deposit or withdrawal, necessary financial data is shared with the relevant payment service provider (such as GCash, Maya, BPI, BDO, or a USDT wallet processor) to complete the transaction. These providers are contractually bound to handle your data in compliance with applicable data protection law.
• Identity Verification Providers: phperya engages specialist KYC and identity verification service providers to assist with the verification of player identities and the authenticity of identity documents. These providers process your identity data under strict contractual data processing agreements.
• Game Providers: phperya's game catalogue is powered by licensed third-party game providers including JILI, Pragmatic Play, PG Soft, and others. Limited technical data (such as a player session token) may be shared with game providers to facilitate gameplay. Game providers do not receive your full identity or financial data.
• Fraud Prevention & AML Services: phperya uses specialist fraud prevention and anti-money laundering screening services. Relevant transaction and identity data may be shared with these services to fulfil phperya's legal obligations and protect the integrity of the platform.
• Regulatory Authorities: phperya may be required by law or regulatory directive to disclose personal data to relevant government authorities, including law enforcement agencies or the National Privacy Commission (NPC), where required by a valid legal process.
• Corporate Transactions: In the event of a merger, acquisition, or sale of phperya's business or assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

All third parties with whom phperya shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared.

phperya's primary operations and data storage infrastructure are based in the Asia-Pacific region. However, some of the third-party service providers engaged by phperya — including game software providers and identity verification platforms — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, phperya ensures that adequate safeguards are in place to protect that data in accordance with the requirements of RA 10173 and its implementing regulations. Such safeguards may include:

• Standard contractual clauses (data processing agreements) that bind the recipient to data protection standards equivalent to those required under Philippine law.
• Transfers to jurisdictions that the National Privacy Commission has recognised as providing an adequate level of data protection.
• Other legally recognised transfer mechanisms where applicable.

By using the phperya platform and accepting this Privacy Policy, you acknowledge that your personal data may be processed in countries outside the Philippines where data protection laws may differ. phperya is committed to ensuring that any such transfers are handled responsibly and with appropriate protections in place.

phperya retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with an active phperya account is retained for the full duration of the account's existence, plus an additional period following account closure to meet legal and regulatory requirements.
• Financial Transaction Records: Records of all deposits, withdrawals, and wagering transactions are retained for a minimum of five (5) years following the date of each transaction, in compliance with anti-money laundering regulations applicable in the Philippines.
• KYC & Identity Documents: Identity verification documents and related records are retained for a minimum of five (5) years following the closure of the relevant account, unless a longer retention period is required by law.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for a period of three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Records of your marketing communication consent (and any subsequent withdrawal of that consent) are retained for the duration of your account relationship with phperya.
• Self-Exclusion Records: Where a player has requested self-exclusion, relevant records are retained for the full duration of the exclusion period and for a reasonable period thereafter, to prevent re-registration during the exclusion period.

When personal data is no longer required and no legal basis exists for its continued retention, phperya will securely delete or anonymise that data in accordance with industry best practices.

Under the Data Privacy Act of 2012 (RA 10173), Filipino players on the phperya platform hold the following rights with respect to their personal data. phperya is committed to honouring these rights promptly and transparently:

To exercise any of these rights, please contact phperya's Data Protection Officer (DPO) via the contact details provided in Section 15 of this Privacy Policy. phperya will respond to all verified privacy rights requests within 15 business days of receipt, in accordance with the timeframes prescribed under RA 10173 and its implementing regulations.

phperya implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• Encryption in Transit: All data transmitted between your device and the phperya platform is encrypted using Transport Layer Security (TLS 1.2 or higher). This includes login credentials, financial transaction data, and all form submissions.
• Encryption at Rest: Personal data stored in phperya's databases — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within phperya's systems is restricted on a strict need-to-know basis. Staff access is controlled through role-based access management, multi-factor authentication, and detailed audit logging.
• Two-Factor Authentication (2FA): phperya offers and encourages the use of two-factor authentication for all player accounts, providing an additional layer of protection against unauthorised access.
• Regular Security Audits: phperya's technical infrastructure undergoes regular security assessments, vulnerability scans, and penetration testing conducted by qualified security professionals.
• Data Breach Response: phperya maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, phperya will notify the National Privacy Commission and affected individuals within the timeframes required by law.
• Staff Training: All phperya staff who handle personal data receive regular data protection and security training to ensure that privacy obligations are understood and consistently applied.

The phperya platform is strictly for players aged 21 years and above. This minimum age requirement is set in accordance with Philippine regulations governing online casino and gaming platforms. phperya does not knowingly collect, process, or store personal data relating to individuals under the age of 21.

As part of the account registration and KYC verification process, all players are required to confirm their date of birth and submit valid government-issued identity documents that establish their age. phperya uses automated and manual verification processes to identify and reject registration attempts by individuals who do not meet the minimum age requirement.

If phperya becomes aware that personal data has been collected from an individual under the age of 21, phperya will immediately take steps to:

• Suspend and close the relevant account.
• Void any transactions associated with the account.
• Securely delete the personal data of the underage individual from phperya's systems without undue delay.
• Report the incident to relevant regulatory authorities where required by law.

If you are a parent or guardian and believe that your child has registered on the phperya platform or submitted personal data to phperya, please contact us immediately at [email protected] and we will take immediate remedial action.

The phperya platform may contain references to third-party services such as payment processors and game providers. These third-party services operate under their own independent privacy policies, which phperya does not control and is not responsible for.

phperya strongly recommends that you review the privacy policies of any third-party service providers with whom you interact in connection with your use of the phperya platform — particularly payment service providers such as GCash and Maya — to understand how those providers handle your personal data.

The inclusion of a reference to a third-party service on the phperya platform does not constitute an endorsement of that service's privacy practices by phperya.

phperya reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the features and services offered on the platform. All changes will be effective immediately upon publication of the updated Privacy Policy on the phperya website.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way phperya handles your personal data — phperya will provide advance notice by:

• Posting a prominent notice on the phperya platform homepage and login page for a period of at least 14 days prior to the changes taking effect.
• Sending a notification to the email address associated with your phperya account, where you have provided a valid email address.

Your continued use of the phperya platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Privacy Policy, you should discontinue use of the phperya platform and contact our support team to discuss the closure of your account.

The "Last Updated" date displayed at the top of this Privacy Policy indicates when the most recent version was published. We encourage you to review this Policy periodically to stay informed about how phperya protects your personal data.

phperya has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact phperya's DPO through the following channels:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that phperya has violated your rights under the Data Privacy Act of 2012. The NPC can be reached through its official government channels.

phperya is committed to working cooperatively with the NPC and with our players to resolve any privacy concerns in a fair, transparent, and timely manner. We view every privacy inquiry as an opportunity to demonstrate our commitment to responsible data stewardship.