Your personal information matters. This Privacy Policy explains exactly what data phpasay collects when you play on our platform, how we use it, who we share it with, and how you can exercise your rights as a data subject under Philippine law.
phpasay takes your privacy seriously. This Privacy Policy describes how phpasay collects, uses, stores, discloses, and protects the personal information of players and visitors who access the phpasay platform, including our website at phpasay.best and any related mobile-compatible interfaces.
This Privacy Policy is prepared in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the relevant issuances of the National Privacy Commission (NPC) of the Philippines. By accessing phpasay and registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
This Privacy Policy forms part of and should be read alongside phpasay's Terms and Conditions. If you have questions about either document, the phpasay support team is available at support@phpasay.best or via 24/7 live chat inside your account.
phpasay is the data controller for personal information collected through this platform. Our designated Data Protection Officer (DPO) can be reached at the contact details provided in Section 12 of this policy.
phpasay collects the minimum personal information necessary to provide you with a safe, fair, and fully functional online gaming experience. The categories of personal data we collect include:
phpasay collects personal data through several channels:
phpasay processes your personal data only for specific, legitimate purposes. The table below summarises what we use your data for and the legal basis under the Data Privacy Act:
| Purpose | Legal Basis (RA 10173) |
|---|---|
| Creating and managing your phpasay account | Performance of a contract |
| Identity verification and age confirmation (21+) | Legal obligation / Compliance with regulations |
| Processing deposits and withdrawals in PHP | Performance of a contract |
| Anti-money laundering (AML) and fraud prevention | Legal obligation / Legitimate interest |
| Personalising your gaming experience and recommendations | Consent / Legitimate interest |
| Sending service updates, transaction confirmations, and security alerts | Performance of a contract |
| Sending promotional communications (bonuses, offers, VIP Club updates) | Consent (opt-out available) |
| Responsible gaming monitoring and intervention | Legitimate interest / Legal obligation |
| Platform analytics and improvement | Legitimate interest |
| Resolving disputes and responding to support queries | Legitimate interest / Legal obligation |
phpasay will not use your personal data for purposes beyond those listed above without obtaining your separate, informed consent first. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting support.
phpasay does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the following limited circumstances:
phpasay works with carefully selected third-party service providers who process data on our behalf under strict data processing agreements. These include payment processors (GCash, Maya, and partner banks), identity verification providers, cloud hosting services, and customer support software providers. All service providers are required to handle your data solely for the purpose for which it was shared and to maintain appropriate security measures.
phpasay may disclose personal data to Philippine government authorities, regulators, law enforcement agencies, or courts where required to do so by applicable law — including compliance with subpoenas, court orders, anti-money laundering investigations, or requests from the National Privacy Commission. We will inform you of such disclosures wherever legally permitted to do so.
In the event of a merger, acquisition, or sale of all or part of phpasay's business, your personal data may be transferred to the successor entity. You will be notified of any such change and given the opportunity to delete your account before the transfer takes effect if you do not wish your data to be transferred.
phpasay requires all third-party recipients of your data to implement security measures equivalent to or exceeding those we maintain ourselves. We do not transfer personal data outside the Philippines except where necessary and with appropriate safeguards in place.
At phpasay, we believe that data privacy is not something to manage in fine print — it's a genuine commitment to every Filipino player using the platform. You have real, enforceable rights over your personal information, and phpasay is set up to make it easy for you to exercise them.
Whether you want to download a copy of everything we hold on you, correct an outdated address, or have your account deleted entirely — the phpasay Data Protection Officer is here to help. Most requests are processed within 15 business days, in line with NPC guidelines.
support@phpasay.best
Within 15 business days
phpasay uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and understand how players use the site. A "cookie" is a small text file placed on your device by your browser when you visit a website.
Most browsers allow you to control cookies through their settings. Disabling cookies may affect the performance or availability of certain features on the phpasay platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.
phpasay does not use third-party advertising networks that track you across unrelated websites. Any tracking technologies we use are strictly for the purpose of operating and improving phpasay itself.
phpasay retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, subject to legal requirements that may mandate longer retention periods.
Once the applicable retention period expires, phpasay securely destroys or anonymises personal data so that it can no longer be attributed to an identifiable individual.
phpasay implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security practices include:
While phpasay takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their phpasay account and to enable 2FA. If you suspect your account has been compromised, contact phpasay support immediately.
phpasay will never ask for your password through email, SMS, or live chat. If you receive a message claiming to be from phpasay requesting your password, treat it as fraudulent and report it to support@phpasay.best.
phpasay is strictly for persons aged 21 years and above. We do not knowingly collect or process personal data from individuals under 21 years of age. The phpasay registration process includes an age verification step, and accounts suspected of being operated by persons under 21 will be suspended pending verification.
If phpasay becomes aware that personal data has been collected from a minor, we will delete such data as promptly as possible and will report the matter to the appropriate Philippine authorities where required. If you believe that a minor has registered on phpasay, please notify us immediately at support@phpasay.best.
phpasay may update this Privacy Policy from time to time to reflect changes in our data processing practices, Philippine law, NPC regulations, or for other operational reasons. When we make material changes, we will:
Continued use of phpasay after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with a material change, you may request the closure of your account before the change takes effect.
The current version of this Privacy Policy is always accessible at phpasay.best/privacy-policy.
If you have any questions about this Privacy Policy, want to exercise any of your data subject rights, or wish to raise a privacy concern, please contact the phpasay Data Protection Officer (DPO):
phpasay will acknowledge your request within three (3) business days and will endeavour to resolve it within fifteen (15) business days in line with NPC guidelines. For complex requests, we may require additional time and will keep you updated on progress.
If you are not satisfied with phpasay's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.
Under Republic Act No. 10173, every Filipino player at phpasay has eight enforceable rights over their personal data. Here's what each one means for you.
You have the right to know what personal data phpasay collects, why we collect it, how we use it, and who we share it with — which is exactly what this Privacy Policy tells you.
You can request a copy of the personal information phpasay holds about you at any time. We will provide this within 15 business days of your verified request at no charge.
If any personal data phpasay holds about you is inaccurate or incomplete, you have the right to have it corrected. You can update most details directly in your account settings.
You can request the deletion of your personal data. Where we are not required by law to retain it, phpasay will permanently delete your data and confirm this to you in writing.
You can object to certain types of data processing, including profiling and direct marketing. Once you object to marketing, phpasay will stop sending promotional communications immediately.
Where you dispute the accuracy of your data or have objected to its processing, you can request that phpasay suspends use of that data while the issue is resolved.
You can request a machine-readable copy of the personal data you have provided to phpasay, making it easier to transfer to another service provider if you choose to do so.
If you feel your data privacy rights have not been respected, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.
Beyond the legal requirements, here's what we actually do day-to-day to keep your personal information safe.
Every piece of data that travels between your device and phpasay servers is protected by TLS encryption. Your login credentials, payment details, and identity documents are never transmitted in plain text — not for a single millisecond.
phpasay staff can only access personal data that is directly relevant to the task they are performing. Access is logged, monitored, and reviewed regularly. No one at phpasay can browse player data for personal curiosity — access is tracked and audited.
phpasay will never sell or rent your contact details to advertisers or third-party marketers. Marketing emails from phpasay are only sent to players who have opted in, and every single one includes a clear, working unsubscribe option.
phpasay only collects what is genuinely necessary. We don't build extensive profile data beyond what is needed to operate your account, verify your identity, process payments, and comply with Philippine gaming and AML regulations.
The phpasay platform undergoes regular independent security assessments. Any vulnerabilities identified are remediated promptly. We take a proactive approach to security rather than waiting for problems to be reported from the outside.
In the unlikely event of a data breach affecting your personal information, phpasay will notify you and the National Privacy Commission within the timeframes required under Philippine law — clearly, promptly, and with full details of what was affected.
The Data Privacy Act of 2012 (Republic Act No. 10173) is the Philippines' primary law protecting the personal information of every Filipino. It gives you real, actionable rights over your data and requires organisations like phpasay to be transparent and responsible in how they handle it.
The National Privacy Commission (NPC) enforces the DPA and is the body you can turn to if you believe your privacy rights have been violated. phpasay is committed to full compliance with the DPA and all NPC circulars and guidelines relevant to our operations as an online gaming platform serving Filipino players.
If you want to understand more about your rights under Philippine data privacy law, we encourage you to visit the NPC's official website at privacy.gov.ph. Their resources are written in plain language and cover everything from how to file a complaint to what organisations are required to do to protect your data.
