clubphp Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how clubphp ("clubphp", "we", "us", "our"), the operator of the online gaming platform at clubphp.biz, collects, uses, stores, shares, and protects the personal information of individuals ("you", "Player", "User") who access or use the clubphp platform and associated services.

This Policy applies to all personal data processed in connection with:

• Registration of a clubphp player account;
• Use of any game, feature, or service on the clubphp platform;
• Financial transactions including deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, or any other supported payment method;
• Communications between you and clubphp's customer support team;
• Participation in clubphp promotions, tournaments, and loyalty programmes; and
• Browsing the clubphp website, including passive data collection via cookies and similar technologies.

This Policy is governed by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable PAGCOR regulatory requirements. By using the clubphp platform, you acknowledge that you have read and understood this Policy.

2. Data Controller

clubphp is the data controller responsible for your personal information as defined under the Philippine Data Privacy Act of 2012. clubphp determines the purposes and means of processing your personal data in connection with the operation of the clubphp platform.

clubphp has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data privacy obligations under Philippine law. Contact details for the DPO are provided in Section 14 of this Policy.

3. Categories of Personal Data We Collect

clubphp collects the following categories of personal data from its players:

clubphp does not intentionally collect sensitive personal information beyond what is listed above. We do not collect racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required by Philippine law or regulatory direction.

4. How We Collect Personal Data

clubphp collects personal data through the following means:

• Direct collection — information you provide when registering your account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated technical collection — data collected automatically when you access the clubphp platform, including IP address, device identifiers, browser type, and session data, via server logs and analytics tools.
• Cookie-based collection — data collected through first-party cookies and similar technologies placed on your device when you browse clubphp.biz. See Section 9 for details.
• Payment processor data — transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processing partners when you initiate a deposit or withdrawal.
• Third-party verification — identity and address verification data received from authorised KYC/AML service providers engaged by clubphp to fulfil regulatory obligations.

5. Purposes of Processing

clubphp processes your personal data for the following purposes:

• Creating, maintaining, and managing your clubphp player account;
• Verifying your identity and age in compliance with PAGCOR regulations and KYC/AML requirements under Philippine law;
• Processing deposits, withdrawals, and financial transactions via your chosen payment method;
• Detecting, investigating, and preventing fraud, money laundering, and other unlawful conduct on the platform;
• Administering bonuses, promotions, loyalty programmes, and tournaments;
• Providing customer support and resolving disputes submitted to our 24/7 team;
• Personalising your gaming experience on the clubphp platform based on your gameplay history and preferences;
• Sending you account-related communications including deposit confirmations, withdrawal updates, and security alerts;
• Sending you promotional communications where you have consented to receive them, with the ability to unsubscribe at any time;
• Complying with applicable Philippine laws, PAGCOR regulatory requirements, and court orders; and
• Administering responsible gaming tools including deposit limits, session limits, and self-exclusion programmes.

6. Legal Bases for Processing

Every personal data processing activity conducted by clubphp is grounded in one or more of the following lawful bases under the Philippine Data Privacy Act of 2012:

• Consent — Where you have given specific, informed, freely given, and unambiguous consent, such as for receiving marketing communications.
• Contractual Necessity — Processing required to enter into or perform the clubphp Player Agreement, including account creation, payment processing, and game service delivery.
• Legal Obligation — Processing necessary to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the National Privacy Commission's registration requirements.
• Legitimate Interest — Processing for clubphp's legitimate business purposes, including fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your rights and freedoms.

7. Sharing of Personal Data

clubphp does not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive transaction data necessary to process your deposits and withdrawals.
• KYC/AML service providers — Authorised identity verification and anti-money laundering screening providers engaged by clubphp to fulfil PAGCOR and AML obligations receive identity data as needed for verification purposes.
• PAGCOR and regulatory authorities — clubphp is required by law to share player data with PAGCOR and other Philippine regulatory or law enforcement authorities upon lawful demand.
• Fraud and security services — Third-party fraud detection and cybersecurity service providers may receive technical and account data as necessary to protect the platform and its players.
• Professional advisers — Lawyers, auditors, and accountants engaged by clubphp may access relevant personal data under strict confidentiality obligations.

8. Data Retention

clubphp retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and KYC data — Retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations under Republic Act No. 9160 (Anti-Money Laundering Act).
• Financial transaction records — Retained for a minimum of five (5) years following the date of the transaction.
• Communication records — Live chat transcripts and support ticket records retained for two (2) years.
• Marketing consent records — Retained for as long as the consent is active and for two (2) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with clubphp's data destruction procedures.

9. Cookies & Tracking Technologies

clubphp uses cookies and similar tracking technologies on clubphp.biz for the following purposes:

• Essential cookies — Required for the platform to function. These include session authentication cookies that keep you logged in during your clubphp session. These cannot be disabled without affecting platform functionality.
• Analytics cookies — First-party analytics tools use cookies to collect aggregated, anonymised data about platform usage — pages visited, session duration, device type — to help us improve the platform. No individual player is identified in analytics reports.
• Preference cookies — Store your language, display, and notification preferences to personalise your clubphp experience across sessions.
• Security cookies — Used in fraud detection and to identify anomalous login patterns that may indicate unauthorised access attempts.

You can manage non-essential cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in to your clubphp account. clubphp does not use third-party advertising or behavioural tracking cookies.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by clubphp:

• Right to be Informed — The right to know what personal data clubphp is collecting, how it is used, and who it is shared with.
• Right to Access — The right to request a copy of the personal data clubphp holds about you.
• Right to Rectification — The right to correct inaccurate or incomplete personal data in your clubphp account.
• Right to Erasure / Right to be Forgotten — The right to request deletion of your personal data, subject to clubphp's legal retention obligations.
• Right to Data Portability — The right to receive your personal data in a structured, commonly used format for transfer to another service provider.
• Right to Object — The right to object to processing based on legitimate interest, including profiling for marketing purposes.
• Right to Lodge a Complaint — The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, contact clubphp's Data Protection Officer as described in Section 14. clubphp will respond to data subject requests within fifteen (15) business days of receipt.

11. Children's Privacy

The clubphp platform is strictly restricted to individuals aged 21 years and above in compliance with PAGCOR regulations. clubphp does not knowingly collect personal information from any person under the age of 21. If clubphp becomes aware that personal data has been collected from a person under 21, the account will be immediately suspended and the personal data deleted, and any funds held in the account will be handled in accordance with applicable regulatory requirements.

If you believe that a minor has registered on the clubphp platform, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

12. Security Measures

clubphp implements the following technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and clubphp's servers;
• Encryption at rest for all sensitive personal and financial data stored in clubphp databases;
• Role-based access controls ensuring that personal data is accessible only to staff with a legitimate need;
• Regular penetration testing and vulnerability assessments of clubphp's platform and infrastructure;
• Audit logging of all access to personal data records, reviewed regularly by the security team;
• Two-factor authentication (OTP via SMS to your registered Philippine mobile number) for account access;
• Staff training on data privacy and security obligations under the Philippine Data Privacy Act of 2012.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, clubphp will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.

13. Changes to This Policy

clubphp may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. Material changes will be communicated to registered players via the email address associated with their account at least seven (7) days before the change takes effect.

The date of the most recent update is displayed at the top of this Policy. Your continued use of the clubphp platform following the effective date of any change constitutes your acknowledgement of the updated Policy.

14. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the personal data clubphp holds about you, please contact our Data Protection Officer:

If you are not satisfied with clubphp's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.