ppgame Privacy Policy

ppgame ("ppgame," "we," "our," "us") respects the privacy and personal data rights of every player who registers and uses our platform. We recognize that Filipino players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Privacy Policy sets out, in clear and plain terms, how ppgame handles that information from the moment it is collected to the moment it is deleted.

ppgame operates as a personal information controller under the Philippine Data Privacy Act of 2012 (Republic Act 10173, "DPA") and is subject to oversight by the National Privacy Commission (NPC). Our data practices are also shaped by PAGCOR's licensing conditions, which impose specific obligations regarding player identification, transaction monitoring, and anti-money laundering compliance.

This Privacy Policy covers your rights, our obligations, and the practical details of how your data moves through ppgame's systems. If you have questions that are not answered here, please contact ppgame's Data Protection Officer as described in Section 16.

ppgame acts as the personal information controller for all data collected through the ppgame platform. As controller, ppgame determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is lawful, fair, and transparent under the DPA.

Where ppgame engages third-party service providers to process personal data on its behalf — including payment processors, identity verification services, and cloud hosting providers — those parties act as personal information processors under written data processing agreements that obligate them to handle your data in accordance with DPA standards and ppgame's instructions.

ppgame collects the following categories of personal data from registered players and platform visitors. All collection is limited to what is necessary for the stated purposes in accordance with the DPA's principle of proportionality.

ppgame collects personal data through the following channels:

• Direct Registration: Information you provide when creating a ppgame account — name, date of birth, contact details, and chosen payment methods.
• KYC Submission: Identity documents and selfie photographs submitted during the verification process.
• Payment Transactions: Financial data collected when you initiate deposits or withdrawal requests through GCash, Maya, or Philippine banking channels.
• Platform Interaction: Gaming activity, session data, and technical data generated automatically as you use the ppgame platform.
• Support Interactions: Information you provide when contacting ppgame's live chat or email support team.
• Cookies and Tracking Technologies: Data collected through cookies and similar technologies as described in Section 8.
• Third-Party Verification Services: Identity verification data returned by ppgame's KYC processing partners upon submission of your documents.

Under the Philippine Data Privacy Act, ppgame relies on the following lawful bases when processing your personal data:

• Contractual Necessity: Processing required to provide the gaming services you have registered for under the ppgame Terms & Conditions — including account management, game delivery, payment processing, and customer support.
• Legal Obligation: Processing necessary for ppgame to comply with PAGCOR licensing conditions, Anti-Money Laundering Council (AMLC) reporting obligations, tax requirements, and other applicable Philippine laws. This includes KYC verification and transaction monitoring.
• Legitimate Interest: Processing for fraud prevention, platform security, and responsible gaming monitoring — activities that protect both ppgame and its players, and for which ppgame has conducted a legitimate interest assessment.
• Consent: Where required by the DPA, ppgame obtains your explicit consent before processing sensitive personal information such as government ID numbers and biometric data. You may withdraw consent at any time, subject to the limitations described in Section 11.

ppgame uses the personal data we collect for the following purposes, each of which is tied to a lawful basis identified in Section 5:

To create and maintain your ppgame account, process deposits and withdrawals, deliver games and betting services, manage bonuses, and respond to support requests. This is the primary purpose for which most personal data is collected and is necessary for the performance of the player agreement.

To verify that you are at least 21 years of age as required by PAGCOR regulations, and to confirm that the identity presented during registration is genuine. ppgame is legally required to complete KYC verification before enabling withdrawal functions on any account.

To detect and prevent fraudulent activity, unauthorized account access, multi-accounting, bonus abuse, and other integrity violations. This includes analysis of login patterns, device fingerprinting, IP geolocation, and transaction anomaly detection. These measures protect the integrity of ppgame for all players.

ppgame is an AMLC-covered entity under Philippine law. We monitor and analyze financial transactions for patterns that may indicate money laundering or other financial crimes, and report suspicious transactions to AMLC as legally required. This processing is mandatory and cannot be opted out of.

To monitor gaming activity against responsible gaming parameters set by the player or triggered by behavioral indicators. This includes applying deposit limits, loss limits, session timers, and self-exclusion statuses as configured in your ppgame account settings.

To analyze aggregated, anonymized usage data for the purpose of improving the ppgame platform — including game lobby optimization, payment flow enhancements, and support quality improvements. This analysis does not involve individual-level profiling.

To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have not opted out of marketing communications. You may opt out of marketing at any time through your ppgame account notification settings or by contacting support. Opt-out from marketing does not affect transactional communications.

ppgame does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Disclosure of personal data to third parties is limited to the following categories and circumstances:

• Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other Philippine payment partners receive the minimum data necessary to process your deposit and withdrawal transactions. These parties process data as personal information processors under their own DPA-compliant frameworks.
• KYC & Identity Verification Services: Third-party identity verification providers process your submitted ID documents and liveness data solely for the purpose of KYC compliance. These providers are bound by strict data processing agreements.
• Game Content Providers: Certified game studios that supply games to ppgame receive session data necessary for game delivery and RTP reporting. No personally identifiable information beyond session tokens is shared for this purpose.
• Cloud Hosting & Infrastructure Providers: ppgame's platform infrastructure is hosted on secure cloud services. Hosting providers access data only in their capacity as infrastructure operators and under contractual data processing agreements.
• Regulatory Authorities: ppgame is obligated to provide player data to PAGCOR, AMLC, and other competent Philippine authorities upon lawful demand. This includes responding to court orders, subpoenas, and regulatory audits.
• Legal and Professional Advisors: ppgame may share data with lawyers, auditors, or compliance consultants where necessary for legal proceedings or regulatory compliance, subject to confidentiality obligations.

In all cases, third parties receiving personal data from ppgame are required to handle it in accordance with DPA standards and are prohibited from using it for purposes beyond those specified in their agreement with ppgame.

ppgame uses cookies and similar technologies on its platform to support essential operations and improve player experience. The following categories of cookies are used:

ppgame does not use cookies for third-party advertising or behavioral retargeting. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the ppgame platform.

ppgame retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to legal retention obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of the player relationship — from account opening through to final account closure and withdrawal processing.
• KYC Documents: Retained for a minimum of five (5) years after account closure, as required by AMLC regulations and PAGCOR licensing conditions.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with Philippine anti-money laundering record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Support Communications: Retained for a minimum of two (2) years after the date of the last interaction.
• Technical & Log Data: Retained for up to twelve (12) months for fraud prevention and security monitoring purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymized using industry-standard methods. Where anonymization is applied, the resulting data is no longer personal data under the DPA and may be retained for statistical or research purposes without restriction.

ppgame implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, and destruction. Security measures in place include:

• Encryption in Transit: All data transmitted between player devices and ppgame servers is encrypted using TLS 1.3 with AES-256 ciphers. This includes all login sessions, game sessions, and payment transactions.
• Encryption at Rest: Sensitive personal data — including KYC documents and financial data — is stored in encrypted form on access-controlled servers.
• Access Controls: ppgame staff access to personal data is role-based and limited to what is necessary for each staff member's function. Access logs are maintained and audited regularly.
• Network Security: ppgame's platform is protected by web application firewalls, DDoS mitigation systems, and intrusion detection infrastructure.
• Vendor Security Due Diligence: All third-party processors engaged by ppgame are required to demonstrate security certifications and undergo due diligence assessment before contract execution.
• Security Testing: ppgame conducts regular penetration testing and vulnerability assessments on its platform infrastructure.

No data transmission over the internet is entirely risk-free. While ppgame employs industry-standard security measures, we cannot guarantee absolute security. Players are encouraged to use strong, unique passwords for their ppgame accounts and to enable OTP two-factor authentication.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ppgame. ppgame will respond to rights requests within thirty (30) calendar days of receipt, extendable by a further thirty (30) days where the request is complex or numerous.

To exercise any of these rights, contact ppgame's Data Protection Officer as described in Section 16. Requests must be submitted from your registered ppgame email address or verified through another identity confirmation method.

If ppgame becomes aware that a registered account belongs to an individual under 21, all associated personal data will be deleted following account closure and fund return procedures, except where retention is mandated by PAGCOR or AMLC requirements related to the investigation of the underage access incident.

Parents or guardians who believe a minor has accessed ppgame should contact us immediately through the live chat support channel or at the email address in Section 16 so that the account can be closed and data handled appropriately.

ppgame's primary data storage and processing infrastructure is located within or connected to the Philippines. Where ppgame engages third-party service providers — such as cloud infrastructure providers or international game studios — that process data outside the Philippines, ppgame ensures that such transfers are subject to appropriate safeguards in accordance with the DPA's cross-border transfer provisions.

Safeguards for cross-border transfers include binding contractual clauses that impose DPA-equivalent data protection obligations on recipient entities, and where applicable, transfers to jurisdictions recognized as providing an adequate level of data protection by the NPC. ppgame does not transfer personal data to jurisdictions without adequate protective measures in place.

ppgame maintains a documented Data Breach Response Plan in compliance with NPC Circular 16-03. In the event of a personal data breach that is likely to result in significant risk to the rights and freedoms of affected players, ppgame will:

• Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, where the breach poses a real risk of harm to data subjects.
• Notify affected players without undue delay, providing a plain-language description of the nature of the breach, the data involved, likely consequences, and the remedial measures taken.
• Conduct a thorough post-breach investigation to identify root causes and implement corrective measures to prevent recurrence.

ppgame maintains breach notification records and cooperates fully with NPC investigations arising from breach incidents.

ppgame may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, NPC guidance, or PAGCOR regulatory requirements. The effective date at the top of this document indicates when the current version was last revised.

Material changes to this Privacy Policy — particularly changes that expand the categories of data collected or introduce new purposes for processing — will be communicated to registered players via a prominent platform notice upon login and/or email notification to the registered address. Where the change requires new consent, ppgame will seek that consent before the change takes effect.

Your continued use of the ppgame platform following the effective date of a revised Privacy Policy constitutes acknowledgment of the updated terms. The most current version of this Privacy Policy is always available at ppgame.biz/privacy-policy.

ppgame has designated a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. The DPO is responsible for overseeing ppgame's data protection compliance, handling data subject rights requests, and serving as the primary point of contact for the National Privacy Commission.

To exercise your data rights, raise a privacy concern, or contact the ppgame DPO, please use the following channels:

• Data Rights & Privacy Queries (Email): support@ppgame.biz — use subject line "Data Privacy Request – [Your Request Type]". Responses within 30 calendar days.
• Live Chat: Available 24/7 on the ppgame platform. For urgent account-related data concerns, live chat provides the fastest initial response.

This Privacy Policy was last reviewed and updated in January 2026. The most current version is authoritative and supersedes all previous versions of the ppgame Privacy Policy.