ppgamig Privacy Policy —
Your Data, Handled with Respect

Section 01

Introduction

ppgamig is committed to protecting the privacy and personal data of every player on our platform. This Policy applies to all personal data processed in connection with your use of the ppgamig website, mobile platform, customer support channels, and any other ppgamig-branded service. It covers data collected from players based in the Philippines and is drafted in accordance with the following applicable laws and regulations:

• Republic Act No. 10173 — Data Privacy Act of 2012 (Philippines)
• Implementing Rules and Regulations of Republic Act No. 10173
• National Privacy Commission (NPC) Circular No. 16-01 and subsequent NPC circulars
• Republic Act No. 9160 — Anti-Money Laundering Act (AMLA), as amended
• PAGCOR regulatory requirements applicable to licensed online gaming operators

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents regarding the processing of personal data, this Privacy Policy shall prevail.

Section 02

Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and NPC regulations, the personal information controller responsible for your data is:

ppgamig has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and the Data Privacy Act. Players may contact the DPO directly at [email protected] for any data privacy-related inquiry.

Section 03

Personal Data We Collect

ppgamig collects the following categories of personal data, depending on how you interact with our platform:

3.1 Registration and Identity Data

• Full legal name (as it appears on a Philippine government-issued ID)
• Date of birth (for age verification — players must be 21 years or older)
• Email address and mobile number
• Residential address (barangay, city/municipality, province)
• Username and account credentials (password stored as a salted hash — never in plain text)
• Government-issued ID type and number (PhilSys, passport, SSS, UMID, driver's licence, PRC ID)

3.2 Financial and Transaction Data

• GCash, Maya, GrabPay, or bank account details linked to your ppgamig account
• USDT wallet addresses (TRC-20 or ERC-20) where applicable
• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Payment method verification documents (for KYC and AMLA compliance)
• Source of funds declarations for high-value accounts

3.3 Platform Activity Data

• Games played, bet amounts, win/loss records, and session duration
• Bonus claims, wagering progress, and promotional participation history
• Sports betting selections, markets, and stake amounts
• Responsible gaming tool usage (deposit limits, self-exclusion requests, reality check settings)

3.4 Technical and Device Data

• IP address and approximate geolocation (used to verify Philippine residency and detect VPN/proxy usage)
• Device type, operating system, browser type, and version
• Unique device identifier and session tokens
• Log data including login timestamps, page views, and error logs

3.5 Customer Support Data

• The content of live chat transcripts, emails, and support tickets you submit to ppgamig
• Complaint records and their resolution outcomes
• Voice call recordings where phone support is provided and consent has been obtained

Section 04

How We Collect Your Personal Data

ppgamig collects personal data through the following means:

4.1 Directly from You

Most of the personal data ppgamig holds is provided directly by you when you register an account, complete KYC verification, make a deposit, contact customer support, or participate in a promotion.

4.2 Automatically from Your Device

When you access ppgamig.net, our systems automatically collect technical data such as your IP address, device identifiers, and session logs. This collection is necessary for platform security, fraud detection, and geographic compliance verification.

4.3 From Payment Processors and KYC Providers

When you link a GCash, Maya, or bank account to ppgamig, our payment processing partners may provide us with confirmation data (such as account name verification) to ensure that your payment method is registered in your own name, in compliance with our anti-money laundering obligations.

4.4 From Cookies and Analytics Tools

ppgamig uses first-party cookies and anonymised analytics to understand how players navigate the platform and to improve the user experience. Full details of our cookie usage are in Section 10 of this Policy.

Section 05

How ppgamig Uses Your Personal Data

ppgamig processes your personal data for the following specific purposes:

• Account Management: Creating and maintaining your player account, verifying your identity and age (21+ requirement), and managing your login credentials.
• Payment Processing: Processing deposits via GCash, Maya, GrabPay, InstaPay, and other accepted methods; processing withdrawals to your verified payment account; maintaining transaction records as required by AMLA.
• Platform Delivery: Delivering casino games, live dealer tables, sports betting markets, and all other ppgamig features you access.
• Fraud and Security: Detecting and preventing fraud, bonus abuse, money laundering, underage gambling, and unauthorised account access.
• Regulatory Compliance: Fulfilling ppgamig's obligations under PAGCOR regulations, the Data Privacy Act, and AMLA, including transaction reporting to the Anti-Money Laundering Council (AMLC) where required by law.
• Responsible Gaming: Monitoring player behaviour to identify signs of problem gambling and applying responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: Responding to your inquiries, complaints, and support requests in a timely and accurate manner.
• Marketing Communications: Sending promotional emails, SMS, or in-platform notifications about ppgamig offers — only where you have provided consent and only until you withdraw that consent.
• Platform Improvement: Using anonymised analytics data to understand player behaviour and improve the ppgamig platform experience for Filipino users.

Section 06

Legal Basis for Processing

Under the Data Privacy Act of 2012, ppgamig processes your personal data on the following legal bases:

Section 07

Data Sharing and Third-Party Disclosure

ppgamig does not sell your personal data. We share data only in the following limited circumstances:

7.1 Payment Processors

To process your GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, and USDT transactions, ppgamig shares the minimum necessary payment data with our authorised payment processing partners. These partners are contractually bound to process your data only for payment purposes and are prohibited from using it for any other purpose.

7.2 Game Providers

To deliver casino games and live dealer content from providers such as JILI Games and other certified providers, ppgamig shares a pseudonymised player identifier with game providers. Your full name, contact details, and financial information are never shared with game providers.

7.3 Identity Verification and KYC Providers

ppgamig uses third-party KYC and identity verification services to assist with the verification of government-issued Philippine IDs and to screen players against sanctions lists as required by AMLA. These providers process your identity documents under strict confidentiality obligations.

7.4 Regulatory and Law Enforcement Authorities

ppgamig will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where required by law, court order, or valid regulatory directive. We will notify affected players of such disclosures unless prohibited from doing so by law.

7.5 Fraud Prevention Networks

ppgamig participates in industry fraud prevention networks and may share data about confirmed fraudulent accounts with other licensed operators to protect the integrity of the Philippine online gaming ecosystem. Only data relating to confirmed fraudulent activity is shared through these networks.

Section 08

Data Retention Periods

ppgamig retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Once the applicable retention period expires, ppgamig will securely delete or anonymise your personal data in accordance with its data destruction procedures. Secure deletion involves overwriting storage media or cryptographic erasure of encryption keys, rendering the data unrecoverable.

Section 09

Security Measures

ppgamig implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

9.1 Technical Controls

• 256-bit SSL/TLS encryption for all data transmitted between your browser and ppgamig servers
• AES-256 encryption for sensitive personal data stored at rest
• Bcrypt hashing with per-user salts for all stored passwords — ppgamig never stores passwords in plain text
• Multi-factor authentication (MFA) available for all player accounts
• Real-time intrusion detection and prevention systems (IDS/IPS)
• Web application firewall (WAF) to protect against SQL injection, cross-site scripting, and other OWASP Top 10 vulnerabilities
• Automated vulnerability scanning and regular penetration testing by independent security firms

9.2 Organisational Controls

• Role-based access control — ppgamig staff can only access player data that is strictly necessary for their job function
• All staff with access to personal data are subject to confidentiality agreements and mandatory data privacy training
• Data access logs are maintained and reviewed regularly by the Data Protection Officer
• Third-party vendors are subject to data processing agreements that impose equivalent security obligations
• Annual data privacy impact assessments (DPIA) conducted for all high-risk processing activities

Section 10

Cookies and Tracking Technologies

ppgamig uses cookies and similar technologies on ppgamig.net. By using our platform, you consent to the use of cookies as described in this section. You may withdraw consent at any time by adjusting your browser settings, though this may affect certain platform functionality.

10.1 Types of Cookies We Use

10.2 What We Do Not Use

ppgamig does not use:

• Third-party advertising cookies or retargeting pixels
• Social media tracking pixels (Facebook Pixel, TikTok Pixel, etc.)
• Cross-site tracking cookies that follow you across other websites
• Browser fingerprinting for identification purposes beyond fraud detection

10.3 Managing Cookies

You can control and delete cookies through your browser settings. The following links provide guidance for the most commonly used browsers among Filipino users:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari (iOS): Settings → Safari → Privacy & Security
• Microsoft Edge: Settings → Cookies and site permissions

Please note that disabling essential cookies will prevent you from logging into your ppgamig account.

Section 11

Minors and Age Restriction

ppgamig implements the following measures to prevent underage access:

• Date of birth collection and verification at the point of registration
• Mandatory government-issued Philippine ID verification (KYC) before the first withdrawal — all accepted Philippine IDs include date of birth
• Automated flagging of accounts where the provided date of birth indicates the player is under 21
• Immediate account suspension and data deletion upon discovery that a player is under 21 years of age

If ppgamig discovers or is notified that personal data has been collected from an individual under 21 years of age, we will immediately suspend the account, delete all associated personal data, reverse any financial transactions where legally possible, and notify the appropriate regulatory authorities if required. If you believe a minor may have registered on ppgamig, please contact [email protected] immediately.

Section 12

How to Exercise Your Data Rights

To exercise any of the data rights described in this Policy, you may submit a written request to ppgamig using the following procedure:

1. Send an email to [email protected] with the subject line: "Data Rights Request – [Type of Request]" (e.g., "Data Rights Request – Access Request" or "Data Rights Request – Erasure Request").
2. Include your full name as registered on your ppgamig account, your registered email address, and a brief description of your request.
3. Attach a copy of a valid Philippine government-issued ID for identity verification purposes. This step is mandatory to protect against fraudulent data requests made by third parties claiming to be you.
4. ppgamig will acknowledge receipt of your request within three (3) business days.
5. ppgamig will fulfil your request, or provide a substantiated reason for declining it, within fifteen (15) business days from the date of acknowledgement, as required by NPC regulations.

There is no fee for submitting a data rights request. However, ppgamig reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests, in line with NPC guidance.

If you are dissatisfied with ppgamig's response to your data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines directly through the NPC's official channels.

Section 13

Personal Data Breach Protocol

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, ppgamig will:

• Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required under NPC Circular No. 16-03
• Notify affected players without undue delay where the breach is likely to result in a high risk to their personal data rights
• Provide affected players with a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures ppgamig is taking to address the breach
• Maintain a breach register documenting all personal data breaches, their effects, and the remedial actions taken

ppgamig's Data Protection Officer will lead the incident response process and coordinate with regulatory authorities and affected parties throughout the breach management process.

Section 14

Cross-Border Data Transfers

In the course of delivering our platform, ppgamig may transfer personal data to service providers or game platform vendors whose servers are located outside of the Philippines. All such cross-border transfers are subject to the following safeguards:

• We only transfer personal data to countries or organisations that the NPC has determined provide an adequate level of protection, or where equivalent contractual safeguards are in place
• All data processing agreements with international vendors include standard contractual clauses approved by or consistent with NPC requirements
• Game provider integrations use pseudonymised player identifiers only — your full name and financial data are never transmitted to overseas game servers
• ppgamig's primary player database and financial transaction records are stored on servers within the Asia-Pacific region

Section 15

Updates to This Privacy Policy

ppgamig may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine laws and NPC regulations, or the features and services we offer. When we make a material change to this Policy, we will:

• Update the "Last Updated" date at the top of this Policy
• Display a notice on the ppgamig platform for at least 30 days after the change takes effect
• Send an email notification to your registered email address for material changes that significantly affect your data rights

Your continued use of ppgamig after a Policy update constitutes your acknowledgement of the revised Policy. If you do not agree with a material change, you may close your account and request deletion of your data by contacting [email protected] before the change takes effect.

This Privacy Policy was last reviewed and updated on January 1, 2026.

Section 16

Contact and Data Protection Officer

For all data privacy inquiries, requests, or concerns related to this Privacy Policy or ppgamig's handling of your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe your data privacy rights have been violated. The NPC is the independent government agency responsible for administering and enforcing the Data Privacy Act of 2012 in the Philippines.