phpark21 Privacy Policy

1. Who We Are

phpark21 is the operator of the online gaming platform available at phpark21.club. We operate under PAGCOR's regulatory framework and are subject to the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

phpark21 acts as the Personal Information Controller in respect of the personal data of our registered players, as defined under the Data Privacy Act of 2012. Decisions about how your personal data is collected, used, and protected are made by phpark21.

For all data privacy enquiries, you may contact our Data Protection Officer at: [email protected] (plain text — not a clickable link).

2. Data We Collect

phpark21 collects personal data that you provide directly, data generated by your use of the Platform, and data received from regulated third parties. The categories of data we collect are described below.

2.1 Registration Data

When you create a phpark21 account, we collect:

• Full legal name
• Date of birth (for age verification — must be 21+)
• Philippine mobile number
• Email address (if provided)
• Username and password (password stored as a salted cryptographic hash — never in plain text)

2.2 KYC & Identity Verification Data

Before processing your first withdrawal, phpark21 is required to verify your identity. For this purpose we collect:

• Copy of a valid Philippine government-issued ID (e.g., SSS, PhilHealth, UMID, Passport, or Driver's License)
• Selfie photograph for liveness verification
• Proof of ownership of registered payment method (e.g., screenshot of GCash or Maya account)

2.3 Transaction Data

For every financial transaction on phpark21, we record: transaction type (deposit/withdrawal/bet/win), amount in Philippine Peso (PHP), timestamp, payment method reference, and the game or product involved.

2.4 Technical & Usage Data

When you use the phpark21 Platform, we automatically collect certain technical information including: IP address, device type and operating system, browser type and version, session duration, pages visited, and game history.

Data Category	Examples	Purpose
Identity Data	Full name, DOB, government ID	KYC, age verification, AML compliance
Contact Data	Mobile number, email	Account access, OTP, support
Financial Data	GCash reference, transaction amounts	Payment processing, AML reporting
Usage Data	IP address, device, game history	Platform security, fraud prevention, analytics
Communications Data	Live chat transcripts, support emails	Customer support, dispute resolution

3. How We Use Your Data

phpark21 uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your phpark21 account, including password resets and OTP delivery.
• Identity Verification: Confirming your age (21+) and identity as required by PAGCOR and Philippine law.
• Payment Processing: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other accepted methods.
• Regulatory Compliance: Fulfilling phpark21's obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), and the Data Privacy Act of 2012.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account takeovers, and other prohibited conduct.
• Customer Support: Responding to your queries, complaints, and support requests.
• Platform Improvement: Analysing aggregate usage patterns to improve the phpark21 gaming experience.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and implementing player protection measures.
• Marketing Communications: Sending promotional offers and bonus notifications to your registered mobile number or email, where you have not opted out.

4. Legal Basis for Processing

phpark21 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contract Performance: Processing necessary to deliver the phpark21 gaming service under the Terms & Conditions you agreed to.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring.
• Consent: Marketing communications are sent only where you have provided consent, which may be withdrawn at any time by contacting support.

5. Sharing Your Data

5.1 phpark21 does not sell your personal data to any third party, ever.

5.2 phpark21 may share your personal data with the following categories of recipient, strictly on a need-to-know basis:

• Payment Processors: GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), BPI, BDO, Metrobank — for the purpose of processing your deposits and withdrawals.
• KYC Verification Partners: Third-party identity verification service providers who assist with document validation and liveness checks.
• Regulatory Authorities: PAGCOR and the Anti-Money Laundering Council (AMLC) — as required by Philippine law.
• National Privacy Commission: In the event of a reportable personal data breach as mandated by RA 10173.
• Technology Service Providers: Cloud hosting, CDN, and cybersecurity partners who process data on behalf of phpark21 under strict data processing agreements.

5.3 All third-party service providers who process personal data on phpark21's behalf are contractually bound to handle that data in accordance with the Data Privacy Act of 2012 and this Privacy Policy.

6. Cookies & Tracking Technologies

6.1 The phpark21 Platform uses cookies and similar technologies to maintain your login session, remember preferences, and collect usage analytics.

6.2 Essential cookies are required for the Platform to function and cannot be disabled. These include session authentication cookies and security tokens.

6.3 Analytics cookies help phpark21 understand how players use the Platform so we can improve the experience. These process data in aggregate and do not identify you individually.

6.4 You may control non-essential cookies through your browser settings. Disabling cookies may affect certain Platform functionality. Continuing to use the phpark21 Platform after being shown our cookie notice constitutes consent to our use of cookies as described in this Policy.

7. Data Retention

phpark21 retains personal data for the following periods:

• Active Account Data: Retained for the duration of your phpark21 account plus five (5) years after account closure, as required by PAGCOR and AML regulations.
• KYC Documents: Retained for a minimum of five (5) years from the date of last transaction, as mandated by Republic Act No. 9160 (Anti-Money Laundering Act).
• Transaction Records: Retained for a minimum of five (5) years in compliance with PAGCOR reporting obligations.
• Support Communications: Retained for three (3) years from the date of the last interaction.
• Marketing Data: Retained until you withdraw your consent or your account is closed, whichever is earlier.

After the applicable retention period expires, phpark21 will securely delete or anonymise your personal data.

8. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phpark21:

• Right to be Informed: The right to know what personal data phpark21 collects and how it is used — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data phpark21 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to phpark21's legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, contact phpark21's Data Protection Officer at [email protected] (plain text only — not a clickable link). phpark21 will respond to all valid requests within fifteen (15) business days.

9. Data Security

9.1 phpark21 implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. These include: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest; salted cryptographic hashing of all passwords; role-based access controls limiting staff access to personal data; and regular security audits.

9.2 While phpark21 takes data security seriously, no internet-based system is 100% immune from security incidents. You play an important role in keeping your account secure — use a strong, unique password and never share your credentials with anyone.

10. Children's Privacy

The phpark21 Platform is strictly for adults aged 21 years and over, as required by PAGCOR regulations. phpark21 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, that account will be immediately closed and any collected data deleted, subject to applicable legal retention requirements.

11. Changes to This Policy

11.1 phpark21 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via their registered Philippine mobile number or email address, with at least seven (7) days' advance notice where practicable.

11.2 The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the phpark21 Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

12. Contact & Complaints

For questions about this Privacy Policy, to exercise your data subject rights, or to report a data privacy concern, please contact phpark21's Data Protection Officer:

• Email: [email protected] (plain text only — not a clickable link)
• Response Time: Within 15 business days of receipt

If you are not satisfied with phpark21's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC's complaint process is available through official Philippine government channels.