clubph Privacy Policy

This Privacy Policy is issued by clubph ("clubph," "we," "us," or "our"), the operator of the online gaming platform accessible at clubph.net and all associated subdomains, mobile interfaces, and related services (collectively, the "Platform"). clubph operates in compliance with the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR) and in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (the "Data Privacy Act") and its implementing rules and regulations.

For the purposes of the Data Privacy Act, clubph acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes about you. This means clubph determines the purposes for which your personal data is processed and the means by which that processing is carried out.

clubph collects personal data that is necessary to provide you with a safe, secure, and compliant gaming experience. The categories of personal data we collect are described in the table below:

clubph does not knowingly collect sensitive personal information (as defined under the Data Privacy Act) unless it is strictly required for compliance purposes, such as for anti-money laundering (AML) reporting obligations. Where such collection is necessary, it will always be accompanied by an explicit notice and, where required, your explicit consent.

clubph collects personal data through the following means:

• Direct Collection: Information you provide voluntarily when you register a clubph account, complete identity verification (KYC), make a deposit or withdrawal, contact our support team, respond to a survey, or participate in a promotion.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the clubph platform, including through cookies, web beacons, and similar tracking technologies. See Section 7 for details on our use of cookies.
• Third-Party Sources: Identity and fraud-screening data obtained from third-party KYC verification providers, payment processors (including GCash, PayMaya, BPI, BDO, and Metrobank), and publicly available sources, where necessary to comply with our legal obligations.

clubph uses your personal data for the following specific purposes, each of which is grounded in an appropriate legal basis as described in Section 5:

• Account Management: To create, maintain, and administer your clubph account, including processing your registration, verifying your identity and age (21+ requirement), and managing your account settings and preferences.
• Platform Operation: To provide you with access to all clubph games and services, process your deposits and withdrawals, award bonuses and promotional rewards, and maintain your gaming history.
• Regulatory Compliance: To comply with our obligations under applicable Philippine law, including PAGCOR licensing requirements, anti-money laundering (AML) regulations, and the Data Privacy Act. This includes conducting customer due diligence (CDD), reporting suspicious transactions, and responding to lawful requests from regulatory and law enforcement authorities.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce responsible gaming limits and self-exclusion requests, and proactively offer support resources to at-risk players.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the clubph platform.
• Customer Support: To respond to your queries, resolve complaints and disputes, and improve the quality of our support services.
• Platform Improvement: To analyze usage patterns, conduct A/B testing, and improve the features, performance, and user experience of the clubph platform.
• Marketing and Promotions: To send you information about clubph promotions, new games, and special offers — but only where you have given your explicit consent to receive such communications. You can withdraw this consent at any time by contacting our support team.

Under the Data Privacy Act of 2012, clubph is required to have a valid legal basis for processing your personal data. The legal bases on which clubph relies are as follows:

• Contractual Necessity: Processing that is necessary to perform the clubph Terms & Conditions agreement with you — for example, creating your account, processing your deposits and withdrawals, and providing you with access to games.
• Legal Obligation: Processing that is required to comply with a legal obligation to which clubph is subject — for example, KYC verification, AML reporting, and responding to lawful regulatory inquiries.
• Legitimate Interests: Processing that is necessary for the legitimate interests of clubph or a third party, provided that those interests are not overridden by your fundamental rights and freedoms — for example, fraud detection, platform security, and analytics-driven platform improvement.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, sending you marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

clubph does not sell, rent, or trade your personal data to any third party. However, we may share your personal data with the following categories of recipients where it is necessary to do so for a legitimate purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party service providers who assist clubph in verifying the identity and age of players as part of our regulatory compliance obligations.
• Game Providers: Third-party game studios and content providers whose games are made available on the clubph platform. These providers may receive limited technical data necessary for game operation and dispute resolution.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine National Police (PNP), and other competent authorities, where clubph is legally required or permitted to disclose your data.
• IT and Cloud Service Providers: Technology partners who provide hosting, data storage, analytics, security, and other infrastructure services to clubph, under strict data processing agreements that require them to process your data only on clubph's instructions.
• Professional Advisors: Lawyers, auditors, and accountants where necessary for the provision of professional services to clubph.

The clubph platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, analyze platform usage, and deliver relevant content. Cookies are small text files stored on your device by your web browser.

clubph uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the clubph platform. These cookies enable core functions such as account login, session management, and security. They cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Enable the platform to remember your preferences and settings — for example, your preferred language, responsible gaming limits, and display preferences.
• Analytics Cookies: Help clubph understand how players interact with the platform by collecting aggregated, anonymized usage data. This data is used to improve platform performance and user experience.
• Marketing Cookies: Used to deliver relevant promotions and offers to you, based on your gaming preferences and behavior. These cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of the clubph platform. You can also update your marketing cookie preferences at any time by contacting the clubph support team via live chat.

clubph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general rule, clubph applies the following retention periods:

• Account Data: Retained for the duration of your account's existence and for a period of five (5) years following permanent account closure, in compliance with PAGCOR regulatory requirements and AML obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with the Anti-Money Laundering Act of 2001 (as amended) and its implementing regulations.
• Gaming History: Retained for five (5) years from the date of the gaming session, for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for two (2) years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, at which point your data will be removed from our marketing lists within thirty (30) days.

clubph implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the clubph platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that clubph staff can only access personal data that is necessary for their specific role.
• Multi-factor authentication for all internal systems that handle personal data.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• A formal data breach response plan, including notification procedures in accordance with the Data Privacy Act's mandatory breach notification requirements.
• Staff training on data protection obligations and information security best practices.

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights in respect of your personal data held by clubph. You may exercise any of these rights by contacting the clubph Data Protection Officer using the contact details in Section 13:

clubph will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it. Exercising your data rights is free of charge.

The clubph platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. clubph does not knowingly collect personal data from any person under the age of 21.

If clubph discovers or has reason to believe that an account has been registered by or on behalf of a person under 21 years of age, the account will be immediately suspended pending investigation. If the account holder is confirmed to be under 21, the account will be permanently closed, all deposits will be returned in accordance with applicable regulations, and any personal data collected will be securely deleted to the extent permitted by law.

If you are a parent or guardian and believe that your child has registered an account on the clubph platform, please contact the clubph support team via live chat immediately.

clubph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made to this Policy, clubph will notify registered players by email and/or by a prominent notice on the clubph platform at least fourteen (14) days before the changes take effect.

The most current version of this Privacy Policy will always be accessible on this page, with the effective date and last updated date clearly indicated at the top. We encourage you to review this Policy periodically to stay informed about how clubph protects your personal data. Your continued use of the clubph platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way clubph handles your personal data, or if you wish to exercise any of your data rights, please contact the clubph Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly from the clubph platform. This is the fastest way to reach our team for general privacy queries.
• Email (DPO): [email protected] — For formal data rights requests and privacy complaints. Please mark your email "Data Rights Request" or "Privacy Complaint" in the subject line.
• General Support Email: [email protected] — For general account and platform queries. Both addresses are plain text and are not clickable links.

clubph will acknowledge receipt of all privacy-related correspondence within five (5) business days and will aim to resolve all queries and complaints within thirty (30) calendar days.