PlusPHP Privacy
Policy

This Privacy Policy ("Policy") describes how PlusPHP ("PlusPHP," "we," "us," or "our"), the operator of the online gaming platform at plusphp.net, collects, uses, stores, shares, and protects the personal data of users ("you" or "your") who access or use the PlusPHP website, mobile application, and related services (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. By using the PlusPHP Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

PlusPHP collects the following categories of personal data in the course of providing its services:

We do not collect sensitive personal information (as defined under the DPA) unless it is strictly necessary for compliance with legal obligations, such as anti-money laundering (AML) requirements. Where such data is collected, we apply heightened security and access controls.

PlusPHP collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you use the Platform, including cookies, web beacons, server logs, and similar tracking technologies that record your device information, IP address, and browsing behavior on the Platform.
• Third-party sources: Data received from payment processors (such as GCash and PayMaya), identity verification service providers, fraud prevention partners, and analytics providers, where permitted by applicable law.
• KYC and AML checks: Data obtained through identity verification and anti-money laundering screening processes, which may involve cross-referencing your information against government databases or third-party verification services.

PlusPHP processes your personal data for the following purposes:

• To create, manage, and maintain your PlusPHP account, including verifying your identity and age (21+ requirement).
• To process financial transactions, including deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and other supported payment methods.
• To provide customer support and respond to your inquiries, complaints, and requests.
• To detect, investigate, and prevent fraud, money laundering, cheating, and other prohibited activities on the Platform.
• To comply with our legal and regulatory obligations, including AML reporting requirements and cooperation with Philippine law enforcement authorities.
• To monitor gaming activity for responsible gaming purposes, including identifying signs of problem gambling and applying self-exclusion or limit tools where appropriate.
• To send you transactional communications, such as deposit confirmations, withdrawal notifications, and account security alerts.
• To send you marketing and promotional communications, where you have given your consent or where we have a legitimate interest in doing so, subject to your right to opt out at any time.
• To improve the Platform, develop new features, and conduct internal analytics and research.

Under the Data Privacy Act of 2012, PlusPHP processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable Philippine laws and regulations, including AML obligations, tax reporting, and cooperation with regulatory authorities.
• Legitimate interests: Processing carried out for our legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

PlusPHP does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity and screen against sanctions and watchlists.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and analytics service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine government agencies, including the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement bodies, where we are legally required to disclose information.
• Professional advisors: Lawyers, auditors, and other professional advisors, where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

Where personal data is transferred to service providers located outside the Philippines, PlusPHP ensures that appropriate safeguards are in place in accordance with the DPA and NPC guidelines, including the use of standard contractual clauses or equivalent protections.

PlusPHP retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship.
• Support communications: Retained for up to three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained until you withdraw your consent, plus a reasonable period thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

PlusPHP uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use our services.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled as they are required for core features such as login sessions and security.
• Functional cookies: Remember your preferences and settings, such as language and display options, to provide a more personalized experience.
• Analytics cookies: Help us understand how users interact with the Platform — which games are most popular, how long sessions last, and where users encounter issues — so we can improve our services.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. PlusPHP does not use cookies to serve third-party advertising.

PlusPHP implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest using industry-standard encryption algorithms.
• Strict access controls ensuring that personal data is accessible only to authorized personnel on a need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of our systems.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Staff training on data privacy and security obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, PlusPHP will notify the National Privacy Commission (NPC) and affected users in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by PlusPHP:

• Right to be informed: The right to know whether PlusPHP holds personal data about you and to receive clear information about how it is processed.
• Right to access: The right to obtain a copy of your personal data and information about how it is being used.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected or updated.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the contact details in Section 13. We will respond to your request within thirty (30) days, as required by the DPA. In complex cases, we may extend this period by a further thirty (30) days, with prior notice to you.

The PlusPHP Platform is strictly intended for users who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on PlusPHP or provided us with personal data, please contact our support team immediately so that we can investigate and take appropriate action.

PlusPHP reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When material changes are made, we will notify registered users via email or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this page. We encourage you to review this Policy periodically to stay informed about how PlusPHP protects your personal data. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the changes.

PlusPHP has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Policy, please contact our DPO:

Data Protection Officer — PlusPHP
Email: [email protected]
Website: plusphp.net

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that your data privacy rights have been violated. Information about how to file a complaint with the NPC is available on the NPC's official website.