Privacy Policy

1 Introduction

1.1   phpark21 is an online gaming platform serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, and all other regions. In operating this platform, phpark21 collects and processes personal data about its players in order to provide gaming services, manage accounts, process financial transactions, comply with applicable Philippine laws and gaming regulations, and maintain the security and integrity of the platform.

1.2   phpark21 recognises that your personal data belongs to you and that you have the right to know how it is used. This Policy is designed to be transparent and clear — not buried in impenetrable legal language. If anything in this Policy is unclear, please contact our Data Protection Officer (DPO) using the details in Section 14.

1.3   phpark21's data processing practices are governed by Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. We take our obligations under Philippine data privacy law seriously and have implemented organisational, technical, and legal measures to fulfil them.

1.4   This Policy applies to all personal data collected through the phpark21 website, any associated mobile web experience, customer support channels, and any other touchpoints through which phpark21 interacts with Data Subjects.

2 Data We Collect

2.1   phpark21 collects personal data in the following categories:

Data Category	Examples	Collection Trigger
Registration Data	Full name, date of birth, Philippine mobile number, username, password (hashed)	Account creation
Identity Verification (KYC)	Government-issued ID type and number, ID scan/photo, selfie with ID, address proof	KYC process / withdrawal request
Financial Data	GCash number, Maya account reference, bank account name, deposit/withdrawal history, transaction amounts	Deposit, withdrawal, bonus redemption
Gaming Activity Data	Games played, bets placed, wins and losses, session duration, wagering history	Gameplay on platform
Device & Technical Data	IP address, device type, operating system, browser type, screen resolution, connection type	Platform access / login
Behavioural Data	Page views, navigation paths, feature interactions, session timestamps, click patterns	Platform usage (cookies / analytics)
Communications Data	Live chat transcripts, support ticket content, email correspondence content	Customer support interactions
Responsible Gaming Data	Deposit limits set, self-exclusion requests, cooling-off period activations	Player-initiated via Account Settings or support

2.2   phpark21 collects only data that is adequate, relevant, and limited to what is necessary for the specific purposes described in Section 3. We do not collect sensitive personal information (such as biometric data, health records, or political opinions) except where strictly required for KYC identity verification, in which case the data is handled with the heightened protections appropriate to sensitive information under the DPA.

2.3   Data from Third Parties. phpark21 may receive personal data about you from third-party sources including payment processors (e.g., GCash, Maya, BPI, BDO), identity verification service providers, fraud prevention databases, and gaming regulators. Such data is used solely to verify your identity, process transactions, or comply with regulatory obligations.

3 How We Use Your Data

3.1   phpark21 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and managing your phpark21 account; authenticating your identity at login; enabling account recovery;
• Gaming Services: Providing access to games, recording bets and results, calculating and crediting winnings, managing game sessions;
• Payment Processing: Processing deposits, withdrawals, and refunds; verifying payment method ownership; preventing payment fraud;
• KYC & Regulatory Compliance: Verifying your age and identity; complying with Philippine gaming regulations; fulfilling Anti-Money Laundering Council (AMLC) obligations; responding to requests from Philippine gaming regulators and law enforcement;
• Responsible Gaming: Monitoring gaming behaviour for signs of problem gambling; applying and enforcing player-requested deposit limits, session limits, and self-exclusion periods;
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorised account access; maintaining platform integrity;
• Customer Support: Responding to queries, complaints, and disputes; maintaining records of support interactions for quality and compliance purposes;
• Platform Improvement: Analysing usage patterns and behavioural data (in aggregated or pseudonymised form) to improve phpark21's features, game offerings, and user experience;
• Direct Marketing: Sending promotional communications about phpark21 bonuses, new game releases, and platform features — only where you have consented to receive such communications and subject to your right to opt out at any time.

3.2   phpark21 does not use personal data to make fully automated decisions that produce significant legal or similarly significant effects on Data Subjects without human oversight, except where required or permitted by applicable Philippine law.

4 Legal Basis for Processing

4.1   Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, phpark21 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the phpark21 Terms & Conditions — including account management, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with Philippine gaming laws, AMLC requirements, tax obligations, and orders from competent Philippine regulatory authorities;
• Legitimate Interests: Processing necessary for phpark21's legitimate interests in security, fraud prevention, platform integrity, and responsible gaming — where such interests do not override your privacy rights;
• Consent: Processing for direct marketing communications and non-essential cookies — where you have given clear, informed, and freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Sharing Your Data

5.1   phpark21 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes under any circumstances.

5.2   phpark21 shares personal data with the following categories of recipients, strictly for the purposes described:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment partners — to process deposits and withdrawals and verify payment method ownership;
• KYC & Identity Verification Providers: Third-party identity verification service providers — to verify government ID documents and confirm player age and identity;
• Game Providers: Licensed game studios (including JILI Games, PG Soft, Pragmatic Play, and others) — to the minimum extent necessary to facilitate gameplay and resolve game-related disputes;
• IT & Cloud Infrastructure Providers: Hosting, database, and content delivery providers — who process data on phpark21's behalf under strict data processing agreements;
• Fraud Prevention & Security Services: Third-party fraud detection and risk management services — to protect the platform and its players from financial crime and abuse;
• Regulatory Authorities & Law Enforcement: Philippine gaming regulators, the AMLC, the National Privacy Commission, and competent Philippine law enforcement agencies — where required or legally compelled to do so.

5.3   All third-party recipients with whom phpark21 shares personal data are contractually bound to process that data only for the specified purpose, to maintain its confidentiality and security, and to comply with applicable Philippine data privacy law.

6 Data Retention

6.1   phpark21 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and gaming regulations. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of the account and for a minimum of five (5) years following account closure, as required by Philippine gaming regulations;
• KYC and Identity Documents: Retained for a minimum of five (5) years following the end of the customer relationship, as required by AMLC regulations;
• Financial Transaction Data: Retained for a minimum of five (5) years following each transaction, as required by applicable tax and financial regulations;
• Gaming Activity Data: Retained for a minimum of three (3) years following the relevant gaming session or bet;
• Communications and Support Data: Retained for two (2) years following the close of the relevant support interaction;
• Marketing Consent Records: Retained until consent is withdrawn, plus an additional two (2) years to maintain evidence of consent.

6.2   Upon expiry of the applicable retention period, phpark21 will securely delete or anonymise personal data in accordance with our internal data disposal procedures.

7 Cookies & Tracking

7.1   phpark21 uses cookies and similar tracking technologies on its website to enable core platform functionality, maintain session state, analyse usage, and (where consent has been given) deliver relevant promotional content.

7.2   The following categories of cookies are used on phpark21:

• Strictly Necessary Cookies: Essential for the platform to function — including authentication session cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing core functionality;
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the phpark21 platform, enabling phpark21 to improve its user experience. Deployed only where consent is obtained;
• Functional Cookies: Used to remember your preferences (such as language settings and game lobby filter configurations) to personalise your phpark21 experience;
• Marketing Cookies: Used only where you have explicitly consented, to track your interaction with phpark21 promotional content and measure campaign effectiveness.

7.3   You may control and manage cookie settings through your browser settings at any time. Disabling analytics or marketing cookies will not affect your ability to access or use the core phpark21 gaming platform.

8 Data Security

8.1   phpark21's data security measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and phpark21's servers;
• Encryption of sensitive stored data, including financial information and KYC documents, using industry-standard algorithms;
• Hashing of passwords using strong, salted hashing algorithms — phpark21 staff cannot view your password in plaintext;
• Two-factor authentication (2FA) availability for all player accounts;
• Access controls limiting personal data access to authorised phpark21 personnel on a strict need-to-know basis;
• Regular security vulnerability assessments and penetration testing of the phpark21 platform;
• Intrusion detection and anomaly monitoring systems operating continuously;
• Employee data privacy and security training and awareness programmes.

8.2   While phpark21 employs robust security measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own phpark21 login credentials and should contact support immediately if you suspect unauthorised account access.

8.3   Data Breach Response. In the event of a personal data breach that is likely to affect your rights and freedoms, phpark21 will notify the National Privacy Commission (NPC) and affected Data Subjects within the timeframes prescribed by the DPA and NPC guidelines.

9 Your Privacy Rights

9.1   As a Data Subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by phpark21:

• Right to Be Informed: The right to know that phpark21 is collecting and processing your personal data, the purposes of that processing, and how your data is handled — as set out in this Policy;
• Right of Access: The right to request a copy of the personal data phpark21 holds about you, together with information about how it is processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data phpark21 holds about you;
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phpark21's legal retention obligations under Philippine gaming and financial regulations;
• Right to Object: The right to object to phpark21's processing of your personal data where that processing is based on legitimate interests or where the data is processed for direct marketing purposes;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format — to the extent technically feasible and required by the DPA;
• Right to Lodge a Complaint: The right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe phpark21 has not handled your personal data in accordance with the DPA.

9.2   To exercise any of the above rights, please contact phpark21's Data Protection Officer using the contact details in Section 14. phpark21 will respond to verified rights requests within thirty (30) days of receipt, or within such extended period as permitted by the DPA where the request is complex or voluminous.

9.3   phpark21 will not charge a fee for handling rights requests except where requests are manifestly unfounded, excessive, or repetitive, in which case a reasonable fee reflecting administrative costs may apply.

10 Children & Minors

10.1   phpark21 strictly prohibits the registration of and access to the platform by persons under the age of twenty-one (21) years. This age restriction is mandatory under Philippine gaming regulations and is vigorously enforced by phpark21 through age verification and KYC processes.

10.2   phpark21 does not knowingly collect, process, or retain personal data from minors. If phpark21 discovers that an account has been registered by a person under 21 years of age, the account will be immediately terminated, associated funds will be forfeited, and all personal data associated with the account will be deleted in accordance with applicable legal requirements.

10.3   If you are a parent or guardian and believe that a minor in your care has registered on phpark21, please contact us immediately via the details in Section 14. phpark21 will investigate and act promptly on such reports.

11 International Data Transfers

11.1   Some of phpark21's technology partners and game providers are located outside the Philippines. Where personal data is transferred to recipients in foreign jurisdictions, phpark21 ensures that appropriate safeguards are in place to protect the data in a manner consistent with the DPA's requirements for cross-border data transfers.

11.2   Such safeguards include requiring recipients to be bound by contractual data protection obligations no less stringent than those required under the Philippine DPA, and limiting the scope of data transferred to the minimum necessary for the specific purpose.

11.3   phpark21 does not transfer personal data to jurisdictions that lack an adequate level of data protection without implementing the contractual safeguards described in Section 11.2.

12 Third-Party Services

12.1   The phpark21 platform may contain links to game-specific information pages or support resources. These pages are hosted by phpark21 and governed by this Policy. phpark21 does not operate external third-party websites.

12.2   phpark21 embeds content from licensed game providers (such as JILI Games, PG Soft, and Pragmatic Play) within its platform. These providers operate their game engines and may process limited technical data (such as session tokens and bet data) as required to deliver gameplay. Such processing is governed by phpark21's data processing agreements with each provider.

12.3   phpark21 uses third-party payment infrastructure (GCash, Maya, BPI, BDO, Metrobank, and others) to process financial transactions. The privacy practices of these payment providers are governed by their own privacy policies. phpark21 encourages players to review the privacy policies of payment providers they use in conjunction with phpark21.

13 Changes to This Policy

13.1   phpark21 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business operations, or data processing practices. The revised Policy will be published on this page with an updated effective date.

13.2   For material changes to this Policy — particularly those that significantly affect how phpark21 processes your personal data or the rights available to you — phpark21 will notify registered players by publishing a prominent notice on the phpark21 platform prior to the changes taking effect.

13.3   Continued use of phpark21 following the publication of a revised Privacy Policy constitutes acceptance of the updated Policy. If you do not agree to the revised Policy, you should discontinue use of phpark21 and request account closure.

14 Contact & Data Protection Officer

14.1   phpark21 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have questions, concerns, or complaints about how phpark21 handles your personal data, or if you wish to exercise any of your DPA rights, please contact us using the details below.

14.2   phpark21's customer support team is available 24 hours a day, 7 days a week via live chat on the phpark21 platform for general account queries. For formal data privacy matters, written communication to the DPO is recommended to ensure a complete and auditable response.