Privacy Policy

This Privacy Policy ("Policy") describes how philpower ("philpower," "we," "us," or "our"), the operator of the online gaming platform at philpower.org, collects, uses, stores, and protects the personal information of players and visitors ("you" or "your") who access or use our platform.

philpower is committed to protecting your privacy and handling your personal data with the highest standards of care, transparency, and security. This Policy is written in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering an account, accessing the philpower platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the philpower platform immediately.

philpower collects personal data that is necessary to provide our gaming services, verify your identity, process financial transactions, and comply with our legal and regulatory obligations. The categories of personal data we collect are described below.

philpower does not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data, health information, or political affiliations.

philpower uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected.

• Account Creation & Management: To register your philpower account, verify your identity, and manage your account settings and preferences throughout your time as a player.
• Service Delivery: To provide access to philpower's full range of gaming products — including Casino, Slots, Bingo, Super Bingo, and Super Wheel — and to process your bets, calculate winnings, and maintain accurate game records.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment methods, and to maintain accurate financial records of all transactions.
• Identity & Age Verification: To verify that you meet the minimum age requirement of 21 years as required under Philippine gaming regulations, and to confirm that you are who you say you are.
• Regulatory Compliance: To comply with our obligations under Philippine law, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and any directives issued by relevant gaming regulatory authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other security threats to the philpower platform and its players.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our support channels.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behavior, to enforce self-exclusion requests, and to apply deposit and loss limits set by players.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the performance, design, and features of the philpower platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012, philpower processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and philpower — specifically, to provide the gaming services you have registered to use, process your transactions, and manage your account.
• Legal Obligation: Processing is required to comply with philpower's legal obligations under Philippine law, including AML regulations, KYC requirements, tax reporting obligations, and any applicable gaming regulatory requirements.
• Legitimate Interests: Processing is necessary for philpower's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, security monitoring, and platform analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: For certain types of processing — such as sending marketing communications or using non-essential cookies — philpower relies on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

philpower does not share your personal data with third parties except in the limited circumstances described below. In all cases, philpower ensures that any third party receiving your data is bound by appropriate data protection obligations.

• Payment Processors: philpower shares the minimum necessary financial data with payment service providers — including GCash, PayMaya, BPI, BDO, and Metrobank — to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Identity Verification Providers: philpower may use accredited third-party KYC and identity verification services to assist with document verification and age confirmation. These providers process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• Game Software Providers: Some games on the philpower platform are provided by third-party game studios. These providers may receive limited technical data (such as session identifiers) necessary to deliver the game experience. They do not receive your full personal profile.
• Regulatory & Law Enforcement Authorities: philpower may disclose your personal data to Philippine government agencies, law enforcement bodies, or gaming regulatory authorities where required by law, court order, or regulatory directive. This includes reporting obligations under AML regulations.
• Professional Advisors: philpower may share data with legal counsel, auditors, and other professional advisors where necessary for the operation of our business, subject to strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of philpower's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.

philpower uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyze how players use our services. This section explains what cookies we use and how you can manage them.

• Essential Cookies: These cookies are strictly necessary for the philpower platform to function. They maintain your login session, remember your language and display preferences, and ensure the security of your account. Essential cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: philpower uses anonymized analytics data to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is aggregated and does not identify individual players.
• Functional Cookies: These cookies remember your preferences — such as your preferred game category or display settings — to provide a more personalized experience on return visits.
• Security Cookies: philpower uses security cookies to detect and prevent fraudulent activity, unauthorized login attempts, and bot traffic on the platform.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies may prevent you from logging in or using certain features of the philpower platform.

philpower retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

• Account Data: Retained for the duration of your active account relationship with philpower, plus a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with Philippine financial record-keeping requirements.
• KYC & Identity Documents: Retained for the duration of your account plus five (5) years following account closure, or longer if required by a specific regulatory directive.
• Gaming History: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for two (2) years from the date of the last communication, unless the matter relates to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.

When personal data is no longer required, philpower will securely delete or anonymize it in accordance with our data disposal procedures. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify individual players.

philpower implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Layer Security (TLS): All data transmitted between your device and philpower's servers is encrypted using TLS 1.2 or higher, ensuring that your personal and financial information cannot be intercepted in transit.
• Password Hashing: Account passwords are never stored in plain text. philpower uses industry-standard cryptographic hashing algorithms to store password data securely.
• Access Controls: Access to personal data within philpower's systems is restricted on a strict need-to-know basis. Only authorized personnel with a legitimate operational need can access player data, and all access is logged and audited.
• Two-Factor Authentication (2FA): philpower offers 2FA for player accounts and requires it for all internal staff accounts with access to player data.
• Regular Security Audits: philpower conducts regular internal and third-party security assessments to identify and remediate vulnerabilities in our platform and data infrastructure.
• Incident Response: philpower maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, philpower will notify the National Privacy Commission and affected players within the timeframes required by the Data Privacy Act.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by philpower. philpower is committed to honoring these rights promptly and without undue burden to you.

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and shared. This Privacy Policy fulfills that obligation, and philpower will notify you of any material changes.
• Right of Access: You have the right to request a copy of the personal data philpower holds about you, along with information about how it is being processed. philpower will respond to access requests within fifteen (15) business days.
• Right to Rectification: If any personal data philpower holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly through your philpower account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to philpower's legal retention obligations. Note that data required for regulatory compliance cannot be deleted before the applicable retention period expires.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to philpower's overriding legal obligations.
• Right to Lodge a Complaint: If you believe that philpower has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The philpower platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. philpower does not knowingly collect, process, or store personal data from any person under the age of 21.

If philpower discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds in accordance with applicable regulations.

Parents and guardians who believe that a minor may have registered on the philpower platform are encouraged to contact our support team immediately at [email protected]. philpower takes underage access extremely seriously and will act swiftly on any such report.

philpower's primary data processing infrastructure is located within the Philippines. However, some of our third-party service providers — including game software providers and technical infrastructure partners — may process data in other jurisdictions.

Where personal data is transferred outside the Philippines, philpower ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include:

• Contractual clauses that require the recipient to protect your data to Philippine DPA standards.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
• Binding corporate rules where data is transferred within a corporate group.

philpower will not transfer your personal data to any jurisdiction or entity that cannot provide adequate data protection guarantees. If you have questions about specific international transfers, please contact our Data Protection Officer.

philpower reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The effective date at the top of this page will always reflect when the Policy was last revised.

Where changes to this Policy are material — such as changes to the types of data we collect, the purposes for which we use it, or your rights as a data subject — philpower will notify registered players via their registered email address or through an in-platform notification at least seven (7) days before the changes take effect.

Your continued use of the philpower platform after the effective date of any update constitutes your acknowledgment of the revised Policy. philpower recommends that all players review this Privacy Policy periodically to stay informed of how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way philpower handles your personal data, please contact our Data Protection Officer. philpower is committed to addressing all privacy-related inquiries promptly and transparently.

• Data Protection Officer Email: [email protected]
• Subject Line: Please use "Privacy Policy Inquiry" or "Data Privacy Request" so your message is routed to the correct team.
• Response Time: philpower will acknowledge all privacy inquiries within three (3) business days and provide a full response within fifteen (15) business days.
• NPC Complaints: If you are not satisfied with philpower's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.