Privacy Policy — phpark 29 Philippines

phpark 29 is an online gaming platform accessible at phpark29.com, offering games including Tongits, Roulette, Poker, Virtual Sports, and Betting Odds to players in the Philippines. For the purposes of this Privacy Policy, phpark 29 is the data controller — meaning we are the organisation responsible for deciding how and why your personal data is processed.

This Privacy Policy applies to all personal data collected through the phpark 29 website, any mobile-optimised version of the platform, and through direct communication channels such as email and customer support. It applies to registered members and to visitors who have not yet created an account.

phpark 29 operates in compliance with the Data Privacy Act of 2012 (Republic Act 10173) of the Philippines and its implementing rules and regulations under the National Privacy Commission (NPC). This law governs how organisations in the Philippines may collect, process, and store personal data, and provides individuals with defined rights over their information.

phpark 29 collects personal data in three ways: directly from you when you register or interact with the platform, automatically when you use the platform through your device and browser, and from third parties such as payment processors when you make a transaction.

Data you provide directly to phpark 29:

Data collected automatically when you use phpark 29:

• Device information: Device type, operating system version, browser type, and screen resolution. Used to optimise the phpark 29 experience on your specific device.
• IP address: Collected for security purposes, fraud detection, and to confirm that access originates from within the Philippines.
• Session data: Pages visited, games played, time spent per session, and in-game actions. Used to improve platform performance and personalise your experience at phpark 29.
• Cookie data: See Section 8 for a full breakdown of cookies used by phpark 29.

Data received from third parties:

• Transaction confirmation data from GCash, Maya, and other payment processors — limited to transaction reference numbers, amounts, and confirmation status. phpark 29 does not receive your full GCash PIN, bank password, or card CVV from these providers.
• Age and identity verification responses from our KYC verification partner, where applicable.

Every piece of data phpark 29 collects has a defined purpose. The table below maps the data we hold to the reason we hold it.

phpark 29 does not use your personal data for automated decision-making that produces legal or significantly harmful effects on you without human review.

Under the Data Privacy Act of 2012, phpark 29 must have a valid legal basis for every type of personal data processing we conduct. The following bases apply:

• Performance of a contract: Processing your name, contact details, and payment information is necessary to provide the gaming services you signed up for at phpark 29. Without this data, we cannot create your account, process deposits, or pay out winnings.
• Legal obligation: KYC verification, transaction records, and identity checks are required by applicable Philippine anti-money-laundering (AML) laws and gaming regulations. phpark 29 cannot operate without meeting these obligations.
• Legitimate interests: Collecting IP addresses and session data serves phpark 29's legitimate interest in maintaining platform security and preventing fraud. This interest is balanced against your privacy rights and does not override them.
• Consent: Where phpark 29 sends you marketing communications about promotions, bonus offers, or new game launches, we rely on your consent. You may withdraw this consent at any time by clicking the unsubscribe link in any marketing email or by updating your notification preferences in your phpark 29 account settings.

phpark 29 does not sell your personal data. We share it only in the following limited circumstances, and only to the extent necessary for the specific purpose:

• Payment processors: GCash, Maya, GrabPay, BDO, BPI, UnionBank, and card networks receive the transaction information necessary to process your deposit or withdrawal. Each of these providers operates under their own privacy policy and applicable Philippine financial regulations.
• KYC verification partner: When you submit identity documents for verification, those documents are processed by a third-party KYC service. This partner is contractually bound to use your data solely for identity verification and to maintain security standards consistent with Philippine data protection law.
• Cloud infrastructure providers: phpark 29 uses reputable cloud hosting services to store and process platform data. These providers act as data processors under our instructions and are contractually required to maintain appropriate security measures.
• Legal and regulatory authorities: phpark 29 will disclose member data to the National Privacy Commission, Anti-Money Laundering Council, or other Philippine government bodies when required by law, court order, or legitimate regulatory request.
• Fraud prevention services: In some cases, anonymised or aggregated data about unusual account behaviour may be shared with industry fraud prevention networks. This data cannot be used to identify individual members.

phpark 29 implements a layered approach to securing the personal data of all members. Security is treated as an ongoing operational responsibility, not a one-time setup task.

Staff at phpark 29 who handle personal data undergo data privacy training and are bound by confidentiality obligations. Access to member data is restricted on a need-to-know basis — a support agent handling a withdrawal query, for example, can see the information necessary to resolve that query and no more.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, phpark 29 will notify you without undue delay and will report the breach to the National Privacy Commission within the timeframe required by the Data Privacy Act of 2012.

phpark 29 retains your personal data for as long as your account is active and for a defined period after it is closed, determined by legal requirements and legitimate business needs.

• Account data (name, contact details, login history): Retained for the duration of your account plus 5 years after closure, in line with standard record-keeping requirements under Philippine financial regulations.
• Transaction records: Retained for a minimum of 5 years as required by the Anti-Money Laundering Act and related implementing rules applicable to online gaming operators in the Philippines.
• KYC documents: Retained for 5 years from the date of submission or from the date of account closure, whichever is later.
• Support communications: Retained for 2 years from the date of the final communication in each case, unless the matter relates to an ongoing legal or compliance issue.
• Gameplay and session logs: Retained for up to 12 months for performance analysis, then aggregated or deleted.

When retention periods expire, phpark 29 securely deletes or anonymises the relevant data. Anonymised data — from which individual identity cannot be reconstructed — may be retained indefinitely for aggregate statistical analysis.

phpark 29 uses cookies — small text files stored on your device — to make the platform work correctly and to improve your experience. Below is a breakdown of the cookie categories we use. You can manage non-essential cookies through the preferences panel accessible from your account settings.

Under the Data Privacy Act of 2012, every phpark 29 member in the Philippines has the following rights with respect to their personal data. These rights can be exercised by contacting phpark 29 at support@phpark29.com.

phpark 29 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 18. Age verification is conducted as part of the registration and KYC process.

If phpark 29 determines that an account has been registered by a person under 18, or if a parent or guardian notifies us that their minor child has created an account, we will immediately close the account and delete all associated personal data. Any deposited funds will be returned to the verified payment method on file. Please contact support@phpark29.com immediately if you believe a minor has accessed phpark 29.

In some cases, phpark 29 may transfer personal data to service providers whose infrastructure is located outside the Philippines — for example, cloud hosting or cybersecurity partners operating internationally. When this happens, phpark 29 ensures appropriate safeguards are in place, including contractual obligations on the receiving party to maintain data protection standards consistent with or exceeding those required by the Data Privacy Act of 2012.

phpark 29 does not transfer member data internationally without a lawful basis for doing so. Transfers are limited to countries or organisations that provide an adequate level of personal data protection, or where specific contractual safeguards have been established.

phpark 29 may update this Privacy Policy from time to time as our platform evolves, as Philippine law changes, or as data protection best practices develop. When material changes are made, we will notify all registered members via email to their registered address and through an in-platform notification, at least 7 days before changes take effect.

The effective date shown at the top of this page reflects when the current version came into force. Archived versions of previous privacy policies are available on request by emailing support@phpark29.com. Continued use of phpark 29 after a revised policy takes effect constitutes your acceptance of the updated terms.

If you have questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, please contact the phpark 29 privacy team:

• Email: support@phpark29.com — mark your subject line with "Privacy Request" for fastest routing to our data privacy team.
• Response time: Privacy requests are acknowledged within 48 hours and resolved within 30 days. Complex requests that require additional verification may take up to 45 days, in which case we will inform you of the extension.
• Regulatory body: If you are not satisfied with our response to a privacy concern, you may lodge a complaint with the National Privacy Commission of the Philippines. Information on the complaints process is available at the NPC website.

phpark 29 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO can be contacted through the email address above, with "DPO" noted in the subject line. The DPO is independent in the exercise of their duties and reports directly to the management of phpark 29.