Privacy policy & Cookies: Your data rights in the Philippines
Our privacy policy and cookies policy outlines what personal data we collect, the legal basis under RA 10173 (Data Privacy Act of 2012), how to manage cookies, your data subject rights under Philippine law, and how to contact our Data Protection Officer or the National Privacy Commission.
This privacy policy explains how [Publisher legal name] (“we”, “us”, “the site”) collects, uses, and protects your personal data when you visit our website. Alongside it, this page serves as our cookies policy — setting out which cookies we use, why we use them, and how you can manage your preferences. We operate under Philippine law and are bound by the Data Privacy Act of 2012 (Republic Act No. 10173, “the DPA”) and the Implementing Rules and Regulations (“IRR”) issued by the National Privacy Commission (NPC). Our commitment is straightforward: we collect only the data we need, we process it on a lawful basis, and we respect every right the DPA grants you as a data subject. This policy was last reviewed on [effective date]. If we make material changes, we will post the revised version on this page and update the date accordingly.
Table of contents
- Who we are — the data controller
- What personal data we collect
- Why we process your data and our legal basis
- Cookies and similar technologies
- How we share data and any transfers
- How long we keep your data
- Your rights as a data subject
- Data security and breach notification
- How to contact us or complain
- Frequently asked questions
- Our privacy policy commitment
Who we are — the data controller
Under the Data Privacy Act of 2012, the entity that decides how and why your personal data is processed is called the Personal Information Controller (PIC). For this website, the PIC is [Publisher legal name], with its principal address at [Publisher address], Philippines. We are responsible for ensuring that your personal data is handled in accordance with the DPA, its IRR, and the commitments set out in this privacy policy.
We have designated a Data Protection Officer (DPO) to oversee our compliance with the DPA and to serve as your primary point of contact for any privacy concern or data subject request. You may reach the DPO directly at [DPO email].
This site operates under Republic Act No. 10173 and its implementing rules. The National Privacy Commission (NPC), an independent body attached to the Department of Information and Communications Technology (DICT), is the competent supervisory authority for the processing of personal data in the Philippines.
What personal data we collect
Data you give us
When you use our contact form, submit an enquiry, or sign up for a newsletter, you voluntarily provide us with personal data directly. This typically includes your name, your email address, and the content of your message or subscription request. If you reach us through our Facebook page or Messenger — the channel most Filipinos use to get in touch — we receive the personal information you share in that exchange.
We collect only the information that is reasonably necessary for the purpose you have contacted us about. We do not request sensitive personal information — such as government-issued identification numbers, health records, or financial details — through these channels, as defined under Section 3(l) of the DPA.
Data collected automatically
When you browse our website, certain data is collected automatically through cookies and similar technologies, as described in the Cookies section below. This includes your Internet Protocol (IP) address, your device type and browser version, the pages you visit and the time you spend on each, your referral source (how you arrived at our site), and an approximate geographical location derived from your IP address. Timestamps of your visits are also recorded as part of standard web server logs.
We use this technical and usage data exclusively for the purposes described in this policy — primarily to ensure the site functions correctly and to improve the quality and relevance of our content. We do not knowingly collect any personal data from visitors under the age of 21, consistent with the legal gaming age in the Philippines.
Why we process your data and our legal basis
Every act of processing personal data must rest on a lawful basis under the DPA — Section 12 for ordinary personal data and Section 13 for sensitive personal information. The table below maps each purpose for which we process your data to its corresponding lawful basis.
| Purpose of processing | Lawful basis (DPA §12) |
|---|---|
| Responding to enquiries and contact-form messages | Consent / Legitimate interest |
| Newsletter subscriptions and email communications | Consent |
| Site analytics and content improvement | Consent (for non-essential cookies) / Legitimate interest |
| Security, fraud prevention, and abuse detection | Legitimate interest / Legal obligation |
| Compliance with applicable law or regulatory request | Legal obligation |
We do not collect or process sensitive personal information for any of the purposes described above. Where consent is the lawful basis, you have the right to withdraw that consent at any time — withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.
Cookies and similar technologies
Types of cookies we use
Cookies are small text files placed on your device by a website to remember information about your visit. They help us keep the site running, understand how visitors use it, and — where you consent — deliver more relevant content. We use three categories of cookies, as described below.
| Category | Purpose | Examples | Consent required? |
|---|---|---|---|
| Strictly necessary / Technical | Enable core site functions — navigation, security, session management. The site cannot operate properly without these. | Session cookies, security tokens | No — essential |
| Analytics | Measure how visitors interact with the site: pages viewed, time on page, referral source. Used to improve content quality and user experience. | Analytics platform cookies | Yes — consent required |
| Marketing | Track visitors to measure the effectiveness of promotions or to deliver relevant content. May involve third-party networks. | Attribution and retargeting cookies | Yes — consent required |
Managing your cookie consent
When you first visit our site, a consent banner will invite you to accept or decline non-essential cookies. You can accept all cookies, accept only strictly necessary cookies, or adjust your preferences individually by category. Your choice is stored and respected on future visits.
If you wish to withdraw or change your consent at any time, you can return to our cookie-preference centre — accessible via the cookie settings link in the site footer — or adjust your browser settings to block or delete cookies. Please note that disabling analytics or marketing cookies may affect certain features of the site. Withdrawing consent does not affect any processing that was lawfully carried out before you withdrew it.
How we share data and any transfers
We do not sell your personal data to any third party, and we do not share it with casino operators, advertisers, or any commercial partner for their own marketing purposes.
Service providers and processors. We engage trusted service providers to operate the website — including web hosting, analytics tools, and email marketing platforms. These companies act as Personal Information Processors (PIPs) under the DPA. We require them, by contract, to process your data only on our documented instructions, to maintain appropriate security standards, and to observe confidentiality obligations at least as stringent as our own.
Legal disclosures. We may disclose your data if required to do so by law, a court order, or a request from a competent Philippine authority — including the National Privacy Commission.
International transfers. Some of our service providers operate outside the Philippines. Where this is the case, we ensure that appropriate safeguards are in place for cross-border transfers of personal data, in accordance with the DPA and the NPC’s rules on international data transfers, so that your data receives an equivalent level of protection regardless of where it is processed.
How long we keep your data
We retain personal data only for as long as is necessary for the purpose it was collected, or as required by applicable Philippine law — whichever period is longer. Once data is no longer needed, we securely delete or anonymise it so that it can no longer be linked to you as an individual. Our retention schedule under this privacy policy is as follows:
Contact-form and enquiry data: [retention period — e.g., 12 months from the date of the last interaction]
Newsletter subscriber data: for the duration of the subscription, and [retention period] thereafter
Analytics data: [retention period — e.g., 26 months, as configured in our analytics platform]
Security logs: [retention period]
You may request earlier deletion of your personal data by exercising your right to erasure, described below. We will act on your request within a reasonable period and confirm when deletion is complete.
Your rights as a data subject
The Data Privacy Act of 2012 grants every data subject a comprehensive set of rights in relation to their personal data. These are not mere formalities — they are enforceable entitlements under Philippine law. You may exercise any of the rights below by contacting our DPO using the details in the Contact section. We will verify your identity before acting on any request, and we will keep you informed of progress.
Right to be informed. You have the right to know that your personal data is being collected, and to receive the information set out in this policy before or at the time of collection.
Right to access. You may request a copy of the personal data we hold about you, together with information on how and why it is being processed.
Right to rectification. You may request that we correct any personal data that is inaccurate, incomplete, or out of date.
Right to erasure or blocking (“right to be forgotten”). You may request that we delete or block your personal data where processing no longer has a lawful basis — for example, where you have withdrawn consent and there is no overriding legal obligation to retain the data.
Right to object. You may object to the processing of your personal data at any time, including for direct marketing purposes. Where you object to marketing, we will stop that processing immediately.
Right to data portability. You may request that we provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service if you choose.
Right to damages. If you have suffered harm as a result of inaccurate, incomplete, outdated, false, or unlawfully obtained — or unauthorised use of — your personal data, you may claim compensation under Section 16(f) of the DPA.
Right to lodge a complaint with the NPC. If you are not satisfied with how we have handled a privacy concern or a data subject request, you have the right to file a complaint with the National Privacy Commission at privacy.gov.ph. The NPC is the independent authority that administers the DPA and has the power to investigate and adjudicate complaints.
Data security and breach notification
Protecting your personal data is a responsibility we take seriously. We implement appropriate organisational, physical, and technical security measures proportionate to the nature and volume of the data we process. These include SSL/TLS encryption for all data transmitted between your browser and our server, strict access controls that limit personal data to authorised personnel only, and regular reviews of our security practices and vendor arrangements.
In the event of a personal data breach — meaning any incident of unauthorised access to, acquisition, use, modification, destruction, or disclosure of personal data — we will act in full accordance with Section 38 of the NPC Implementing Rules and Regulations. If a breach involves sensitive personal information, or any information that enables identity fraud, and there is a real risk of serious harm to affected data subjects, we will notify the National Privacy Commission and affected individuals within 72 hours of becoming aware of the breach. Our notification will describe the nature of the breach, the categories and approximate volume of data affected, and the steps we have taken or intend to take to contain it and prevent recurrence.
How to contact us or complain
If you wish to exercise any of the rights described in this privacy policy, ask a question about how we handle your personal data, or raise a concern, please contact our Data Protection Officer:
Email: [DPO email]
Contact page: /contact
Facebook Messenger: [Page name / link]
We aim to acknowledge your message promptly and resolve your concern as quickly as possible. If you are not satisfied with our response, or if you believe we are processing your personal data in breach of the Data Privacy Act of 2012, you have the right to file a complaint directly with the National Privacy Commission at privacy.gov.ph.
Frequently asked questions
Our privacy policy commitment
This privacy policy reflects a commitment that is both legal and practical: your personal data belongs to you, and we process it only to the extent necessary, on a lawful basis, and with the transparency the Data Privacy Act of 2012 demands. We will continue to review and update this policy as our practices evolve or as Philippine data-protection law and NPC guidance changes — the latest version will always be posted on this page with an updated effective date. If you have any question about this privacy policy or how we handle your personal data, our Data Protection Officer is your first point of contact. We would rather hear from you directly than have a concern go unaddressed. You also have the standing right to escalate any unresolved matter to the National Privacy Commission at privacy.gov.ph.
Must be 21 years or older to play. Gambling is intended for entertainment only. Gambling can be addictive. Play responsibly.