Privacy Policy

1 Introduction

OpenPH ("OpenPH," "we," "us," or "our") operates the online gaming platform accessible at openph.net and its associated mobile applications and services (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with the OpenPH Platform, whether as registered players, visitors, or prospective users.

This Privacy Policy ("Policy") describes how OpenPH collects, processes, stores, shares, and protects personal data in connection with your use of the Platform. It also explains the rights available to you under applicable Philippine data protection law, specifically the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of your overall agreement with OpenPH.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, OpenPH is the Personal Information Controller (PIC) in respect of the personal data you provide when using the Platform. As PIC, OpenPH determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

OpenPH has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection legislation. You may contact the OpenPH DPO at any time using the contact details provided in Section 14 of this Policy.

3 Personal Data We Collect

OpenPH collects personal data that is necessary to provide you with a safe, compliant, and functional gaming experience. The categories of personal data we collect include:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used for age verification — you must be 21 or older);
• Residential address (province, city, barangay, ZIP code);
• Email address;
• Mobile phone number (Philippine mobile number).

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., PhilSys National ID, passport, driver's license, UMID, voter's ID);
• Proof of address documents (e.g., utility bill, bank statement);
• Source-of-funds documentation where required by anti-money laundering regulations;
• Selfie or facial image for identity verification purposes.

3.3 Financial Data

• GCash or PayMaya account details (mobile number associated with the account);
• Bank account details for BPI, BDO, or Metrobank transfers (account name and number);
• Transaction history, including deposit amounts, withdrawal amounts, and dates;
• Account balance information.

3.4 Gaming & Activity Data

• Game history, wager amounts, and outcomes;
• Session duration and login timestamps;
• Responsible gaming settings (deposit limits, self-exclusion status);
• Bonus and promotion usage history.

3.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Unique device identifiers;
• Cookie data and session identifiers (see Section 10).

3.6 Communications Data

• Records of your communications with OpenPH support, including chat logs and email correspondence;
• Feedback, complaints, and survey responses submitted to OpenPH.

4 How We Collect Your Data

OpenPH collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey;
• Automatically — through cookies, web beacons, and similar tracking technologies when you visit or use the Platform (see Section 10);
• From third-party payment providers — GCash, PayMaya, BPI, BDO, and Metrobank may share transaction confirmation data with OpenPH to facilitate deposits and withdrawals;
• From identity verification services — OpenPH may use third-party KYC service providers to verify the authenticity of identity documents submitted during registration;
• From fraud prevention and AML screening services — OpenPH may receive data from third-party screening services used to detect fraud, money laundering, or other prohibited activity.

5 How We Use Your Personal Data

OpenPH uses your personal data for the following purposes:

• Account creation and management — to register your OpenPH account, verify your identity, and maintain your account in good standing;
• Service delivery — to provide access to games, process deposits and withdrawals, and deliver the core features of the OpenPH Platform;
• Age and eligibility verification — to confirm that you meet the 21+ age requirement and other eligibility criteria under Philippine law;
• KYC and AML compliance — to fulfill our obligations under Philippine anti-money laundering regulations, including the Anti-Money Laundering Act (AMLA) and PAGCOR compliance requirements;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, unauthorized account access, and other prohibited conduct;
• Customer support — to respond to your inquiries, complaints, and support requests;
• Responsible gaming — to monitor gaming activity, enforce deposit limits and self-exclusion requests, and identify players who may need responsible gaming assistance;
• Platform improvement — to analyze usage patterns, troubleshoot technical issues, and improve the features and performance of the OpenPH Platform;
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time by contacting OpenPH support;
• Legal compliance — to comply with applicable Philippine laws, regulations, court orders, and regulatory directives.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, OpenPH processes your personal data on the following legal bases:

• Contractual necessity — processing is necessary to perform the contract between you and OpenPH (i.e., to provide the gaming services you have registered for);
• Legal obligation — processing is required to comply with applicable Philippine laws, including AMLA, PAGCOR regulations, and NPC directives;
• Legitimate interests — processing is necessary for OpenPH's legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your data protection rights;
• Consent — for marketing communications and certain non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Sharing Your Personal Data

OpenPH does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers — GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers — third-party services engaged to verify the authenticity of identity documents submitted during registration;
• Fraud prevention and AML screening services — third-party providers used to screen for fraud, money laundering, and sanctions list matches;
• IT and platform infrastructure providers — cloud hosting, database, and security service providers who process data on OpenPH's behalf under strict data processing agreements;
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulatory directive;
• Professional advisers — lawyers, auditors, and accountants engaged by OpenPH, subject to professional confidentiality obligations.

Where OpenPH engages third-party processors, we require them to process your personal data only on our documented instructions and to implement appropriate technical and organizational security measures consistent with the Data Privacy Act of 2012.

8 Data Retention

OpenPH retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

After the applicable retention period expires, OpenPH will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9 Data Security

OpenPH implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the OpenPH Platform;
• Encryption of sensitive data at rest, including financial and identity data;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Staff training on data protection obligations and secure data handling practices.

While OpenPH takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, OpenPH will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Data Privacy Act of 2012.

10 Cookies & Tracking Technologies

OpenPH uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. OpenPH uses the following categories of cookies:

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the OpenPH Platform. For more information on managing cookies in popular Philippine mobile browsers, refer to your browser's help documentation.

11 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by OpenPH:

• Right to be informed — you have the right to be informed about how your personal data is collected and processed, as set out in this Policy;
• Right of access — you have the right to request a copy of the personal data OpenPH holds about you;
• Right to rectification — you have the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to OpenPH's legal retention obligations;
• Right to object — you have the right to object to processing of your personal data based on legitimate interests, including direct marketing;
• Right to data portability — you have the right to receive your personal data in a structured, commonly used format where processing is based on consent or contract;
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the OpenPH Data Protection Officer using the contact details in Section 14. OpenPH will respond to your request within the timeframe required by applicable law, generally within thirty (30) calendar days of receipt.

12 Minors & Age Restriction

If OpenPH discovers or has reason to believe that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on the OpenPH Platform, please contact our support team immediately so that we can take appropriate action.

Age verification is a mandatory step in the OpenPH registration and KYC process. OpenPH reserves the right to request documentary proof of age at any time and to suspend accounts pending age verification.

13 Changes to This Privacy Policy

OpenPH reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, OpenPH will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the OpenPH Platform after the effective date of any revised Policy constitutes your acknowledgment of the updated terms. We encourage you to review this Policy periodically.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by OpenPH, please contact our Data Protection Officer:

Data Protection Officer, OpenPH

Email: [email protected]

Support Email: [email protected]

Platform: openph.net

Response Time: Within 30 calendar days of receipt of your request