philpower Privacy Policy

1. Introduction

philpower ("philpower," "we," "us," "our") operates the online gaming platform accessible at philpower.vip (the "Platform"). This Privacy Policy applies to all personal information collected from individuals ("Players," "you," "your") who access, register with, or otherwise interact with the philpower Platform. By creating a philpower account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein.

philpower treats data privacy as a foundational operating principle, not a compliance afterthought. Every data processing activity described in this Policy serves a specific, legitimate purpose tied directly to the delivery of philpower's online gaming services to Filipino players.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, philpower is the personal information controller responsible for the processing of personal data collected through the philpower Platform. philpower has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and for responding to data subject requests. Contact details for the DPO are set out in Section 15 of this Policy.

3. Information We Collect

3.1 Information You Provide Directly

When you register for or use a philpower account, we collect the following categories of personal information:

3.2 Information Collected Automatically

When you access the philpower Platform, we automatically collect certain technical information:

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser type and version
• Session timestamps (login time, duration, logout or session expiry)
• Pages visited within the Platform and navigation paths
• Game activity data (games played, wager amounts, outcomes, session duration)
• Referral source (how you arrived at philpower.vip)

4. How We Collect Personal Data

philpower collects personal information through the following channels:

• Direct submission: Information you actively enter into the registration form, KYC verification portal, cashier, or support interface on the Platform.
• Automated technical collection: Server logs, cookies, and similar tracking technologies that record technical information about your device and session when you access the Platform (see Section 9).
• Payment processors: Transaction confirmation data returned by GCash, Maya, BPI, BDO, Metrobank, and other Philippine payment providers upon processing a deposit or withdrawal.
• Identity verification services: Data returned by third-party KYC and anti-money laundering screening providers used to verify Philippine government-issued identification documents.
• Customer support channels: Information you provide when contacting the philpower support team via live chat or email.

5. Purposes of Processing

philpower processes personal data for the following specific, legitimate purposes:

1. Account creation and management: To establish, maintain, and administer your philpower account, including authentication at login and account settings management.
2. Identity verification (KYC): To verify your identity and age (21+ requirement) in compliance with PAGCOR licensing conditions and Philippine law.
3. Payment processing: To process deposits and withdrawal requests in Philippine Peso via GCash, Maya, BPI, BDO, Metrobank, and other accepted payment channels.
4. Anti-money laundering (AML) compliance: To monitor transactions for suspicious activity and fulfil mandatory reporting obligations under the Philippine Anti-Money Laundering Act (RA 9160, as amended).
5. Responsible gaming: To administer deposit limits, loss limits, session limits, self-exclusion programs, and reality check notifications; and to identify and assist Players who may exhibit signs of problem gambling.
6. Customer support: To respond to your enquiries, resolve disputes, and provide assistance with account or game-related issues.
7. Platform security: To detect and prevent fraud, collusion, multi-accounting, bonus abuse, and other prohibited conduct.
8. Regulatory compliance: To respond to lawful requests from PAGCOR, the National Privacy Commission, and other competent Philippine regulatory authorities.
9. Service improvement: To analyse aggregate, anonymised usage patterns and improve the Platform's functionality, game selection, and user experience.
10. Marketing communications: To send you promotional offers and platform updates where you have given express consent. You may withdraw this consent at any time via Account Settings.

6. Legal Bases for Processing

philpower processes personal data on the following legal bases as recognised under the Philippine Data Privacy Act (RA 10173):

• Contractual necessity: Processing required to perform the contract between you and philpower — namely the provision of online gaming services in accordance with the Terms and Conditions.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine law.
• Legitimate interests: Processing conducted for the legitimate operational interests of philpower, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and interests.
• Consent: Processing carried out on the basis of your express, informed consent — in particular, the sending of marketing communications and the use of non-essential cookies. Consent can be withdrawn at any time.

7. Data Sharing & Disclosure

philpower does not sell, rent, or trade your personal information to third parties for commercial purposes. Personal data may be disclosed in the following limited circumstances:

7.1 Regulatory Authorities

philpower is required by law to disclose personal information and transaction data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities upon receipt of a lawful directive, court order, or warrant. philpower will not notify you of such disclosure where prohibited from doing so by law.

7.2 Service Providers and Processors

philpower engages third-party service providers to assist in delivering the Platform. These providers act as personal information processors under RA 10173 and are contractually bound to process data only on philpower's instructions and in accordance with applicable data protection law. Categories of processors include: payment processing providers, identity verification and KYC service providers, cloud hosting and data centre operators, cybersecurity and fraud detection services, and customer support platform providers.

7.3 Game Content Providers

Aggregated, pseudonymised gameplay data (such as game session activity and wager history) may be shared with licensed game content providers for the purposes of game performance analysis and responsible gaming monitoring. No directly identifiable personal data (such as your full name, ID documents, or payment details) is shared with game providers.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of philpower's assets, personal data may be transferred as part of the transaction, provided that the acquiring entity assumes equivalent data protection obligations. Affected Players will be notified in advance to the extent permitted by law.

8. Third-Party Processors

All third-party processors engaged by philpower are required to enter into a data processing agreement that imposes obligations materially equivalent to those applicable to philpower under RA 10173. philpower conducts due diligence on processors' data protection practices prior to engagement and on an ongoing basis. Where processors are located outside the Philippines, philpower implements appropriate contractual safeguards to ensure equivalent protection for your personal data.

9. Cookies & Tracking Technologies

philpower uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit philpower.vip. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, login state, and security tokens. These cannot be disabled without breaking Platform functionality.
• Performance cookies: Collect anonymised information about how Players use the Platform (e.g., pages visited, error messages encountered) to help philpower improve performance. No personally identifiable information is collected.
• Functional cookies: Remember your preferences (e.g., language settings, recently played games) to provide a more personalised experience.
• Analytics cookies: Used by philpower's analytics provider to understand aggregate usage patterns. Data is pseudonymised and processed in aggregate form only.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform's core features, but may affect the personalisation of your experience.

10. Data Retention

philpower retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Specific retention periods are as follows:

• Account and KYC data: Retained for the duration of your active philpower account and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and AML obligations.
• Transaction and financial data: Retained for a minimum of five (5) years following the date of the transaction, as required by the Anti-Money Laundering Act.
• Customer support records: Retained for two (2) years following the resolution of the relevant support interaction.
• Marketing consent records: Retained for the duration of your active consent and for one (1) year following withdrawal of consent, to demonstrate compliance.
• Technical and session logs: Retained for ninety (90) days for security and fraud investigation purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with philpower's data disposal procedures.

11. Security Measures

philpower implements technical and organisational measures appropriate to the risks associated with processing personal data in an online gaming context. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and philpower's servers
• Encryption of sensitive data at rest, including KYC documents and financial information
• Hashing of account passwords — philpower staff cannot view plaintext passwords
• Role-based access controls limiting internal access to personal data to employees with a documented need-to-know
• Intrusion detection and prevention systems monitoring for unauthorised access attempts
• Regular third-party security audits and penetration testing of the Platform infrastructure
• Incident response procedures and breach notification protocols aligned with RA 10173 requirements

Despite these measures, no system is impenetrable. In the event of a personal data breach that is likely to result in harm to affected Players, philpower will notify the National Privacy Commission and affected individuals within seventy-two (72) hours of becoming aware of the breach, in accordance with RA 10173.

12. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal information held by philpower:

• Right to be informed: The right to be informed of how your personal data is being collected and processed — as provided in this Policy.
• Right of access: The right to request a copy of the personal data philpower holds about you, and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by philpower.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to philpower's legal retention obligations.
• Right to object: The right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for direct marketing purposes.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe philpower has processed your personal data in violation of RA 10173.

To exercise any of these rights, please contact philpower's Data Protection Officer using the details in Section 15. philpower will respond to all data subject requests within thirty (30) calendar days. Complex requests may require an extended response period, in which case philpower will notify you of the delay and the reason therefor.

13. Children's Privacy

The philpower Platform is strictly for persons aged twenty-one (21) years or older in accordance with PAGCOR regulations. philpower does not knowingly collect personal information from individuals under the age of 21. If philpower becomes aware that personal data has been collected from a person under the minimum age, the Account will be immediately suspended, all personal data will be deleted, and the matter will be referred to PAGCOR as required. If you are a parent or guardian and believe that a minor has provided personal information to philpower, please contact the support team immediately.

14. Changes to This Privacy Policy

philpower reserves the right to update this Privacy Policy from time to time to reflect changes in the Platform, applicable law, or philpower's data processing practices. Material changes will be communicated to registered Players via email notification or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the philpower Platform following publication of an updated Privacy Policy constitutes your acceptance of the changes.

15. Contact Us & Data Protection Officer

For all data privacy enquiries, data subject access requests, or concerns regarding this Privacy Policy, please contact the philpower Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the philpower Platform
• Response Time: Initial acknowledgment within 24 hours; substantive response within 30 calendar days
• Operating Hours: Philippine Standard Time (PST, UTC+8)

You also have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe your data privacy rights under RA 10173 have been violated. Information about the NPC's complaint process is available through official Philippine government channels.