playtime Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how playtime ("playtime," "we," "us," "our"), the operator of the online gaming platform at playtime.today, collects, uses, stores, and protects the personal information of its registered players and website visitors ("you," "your," "Data Subject") in the Philippines.

playtime is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable directives issued by the National Privacy Commission (NPC) of the Philippines. This Policy also reflects our obligations under PAGCOR's regulatory framework for licensed online gaming operators.

By registering an account on playtime or by continuing to use the playtime platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the platform and contact our support team to close your account.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, playtime is the Personal Information Controller in respect of the personal data collected through the playtime platform. Our designated Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and applicable data privacy laws.

If you have any questions, concerns, or requests relating to your personal data, you may contact our Data Protection Officer at: [email protected]

3. Personal Data We Collect

playtime collects the following categories of personal data from players and platform users:

Identity and Contact Data:

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification — you must be 21 or older)
• Residential address in the Philippines
• Philippine mobile number and email address
• Government-issued ID details (e.g., PhilSys ID, passport, driver's licence, UMID)

Financial Data:

• GCash or PayMaya account number linked to your playtime account
• BPI, BDO, or Metrobank account details where used for deposits or withdrawals
• Transaction history, including deposit amounts, withdrawal requests, and payment references

Gaming and Platform Data:

• Game history, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming settings, including deposit limits and self-exclusion status
• Customer support interaction records, including chat transcripts and email correspondence

Technical Data:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Login timestamps and session activity logs
• Cookie identifiers and similar tracking data (see Section 11)

4. How We Collect Your Data

playtime collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access and use the playtime platform, including through cookies, log files, and analytics tools.
• Third-party sources: Identity verification data from KYC service providers; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank; and fraud prevention data from our compliance partners.

5. How We Use Your Personal Data

playtime uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your playtime account, including processing your registration and verifying your identity.
• Age and identity verification: To confirm that you are at least 21 years of age and to comply with PAGCOR's KYC requirements for licensed online gaming operators.
• Payment processing: To process deposits, withdrawals, and refunds through your chosen payment method (GCash, PayMaya, BPI, BDO, or Metrobank).
• Platform operation: To provide access to games, process bets, calculate winnings, and deliver the core gaming services of the playtime platform.
• Legal and regulatory compliance: To comply with PAGCOR licensing conditions, anti-money laundering (AML) obligations under Republic Act No. 9160, tax reporting requirements, and any other applicable Philippine laws and regulations.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our obligations under PAGCOR's responsible gaming framework.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct on the platform.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 support channels.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time.
• Platform improvement: To analyse usage patterns, conduct internal research, and improve the features, performance, and user experience of the playtime platform.

6. Legal Basis for Processing

playtime processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform the contract between you and playtime — specifically, to operate your account, process payments, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR licensing conditions, AML regulations, and NPC directives.
• Legitimate interests: Processing is necessary for playtime's legitimate interests in fraud prevention, platform security, and responsible gaming enforcement, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

playtime does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers: GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party service providers engaged to verify your identity and age in compliance with PAGCOR requirements.
• Fraud prevention and AML compliance partners: Service providers that assist playtime in detecting and preventing fraudulent activity and money laundering.
• IT and platform infrastructure providers: Cloud hosting, data storage, and software service providers that support the operation of the playtime platform, all of whom are bound by strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), and other competent Philippine authorities, where disclosure is required by law or regulatory directive.
• Professional advisers: Legal counsel, auditors, and accountants engaged by playtime in connection with the operation of the platform, subject to professional confidentiality obligations.

All third-party service providers engaged by playtime are required to process your personal data only on playtime's instructions and in accordance with applicable data privacy laws. They are prohibited from using your data for their own purposes.

8. International Data Transfers

Where playtime transfers your personal data to service providers or infrastructure partners located outside the Philippines, we ensure that such transfers are conducted in compliance with the Data Privacy Act of 2012 and NPC regulations on cross-border data flows. This includes implementing appropriate safeguards such as data processing agreements that incorporate the NPC's standard contractual clauses or equivalent protections.

playtime will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

9. Data Retention

playtime retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of 5 years from the date of account closure, in compliance with PAGCOR licensing conditions and AML record-keeping requirements under RA 9160.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, as required by the Bureau of Internal Revenue and AMLC regulations.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for a minimum of 2 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for as long as you remain a registered playtime player, or until you withdraw your consent, whichever is earlier.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with NPC guidelines.

10. Security Measures

playtime implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the playtime platform.
• Encryption at rest for sensitive personal and financial data stored on playtime's servers.
• Access controls and role-based permissions ensuring that only authorised playtime personnel can access personal data, and only to the extent required for their specific role.
• Two-factor authentication (2FA) available to all players and mandatory for playtime staff accessing internal systems.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Incident response procedures in place to detect, contain, and report personal data breaches to the NPC and affected individuals within the timeframes required by RA 10173.

While playtime takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, playtime will notify you and the NPC in accordance with our legal obligations.

11. Cookies and Tracking Technologies

playtime uses cookies and similar tracking technologies on the playtime platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, and improve your experience on the platform.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the platform, including maintaining your login session and processing transactions. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming configurations.
• Analytics cookies: Used to collect anonymised data about how players use the platform, helping us identify areas for improvement. These are only set with your consent.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our campaigns. These are only set with your consent.

You can manage or withdraw your consent to non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the playtime platform.

12. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by playtime:

• Right to be informed: The right to be notified of how your personal data is collected, used, and processed — as set out in this Policy.
• Right of access: The right to request a copy of the personal data playtime holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by playtime.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to playtime's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe playtime has violated your data privacy rights.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. playtime will respond to all verified data subject requests within 15 business days of receipt, in accordance with NPC guidelines.

13. Children's Privacy and Age Restrictions

The playtime platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing casino-style online gambling in the Philippines. playtime does not knowingly collect personal data from individuals under the age of 21.

If playtime becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, return any deposited funds to the source payment method, and securely delete the personal data in question. If you believe that a minor has registered on the playtime platform, please contact our support team immediately.

14. Third-Party Links

The playtime platform may contain references to third-party services such as payment providers (GCash, PayMaya, BPI, BDO, Metrobank) and game content providers. These third parties operate their own privacy policies, which are independent of this Policy. playtime is not responsible for the privacy practices of third-party services and encourages you to review their respective privacy policies before providing any personal data to them.

15. Updates to This Privacy Policy

playtime reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or PAGCOR regulatory requirements. Where changes are material, playtime will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the playtime platform following the effective date of any update constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how playtime protects your personal data.

16. Contact Us and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by playtime, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the playtime platform
• Response Time: Within 15 business days for formal data subject requests

If you are not satisfied with playtime's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012 and can be reached through its official government channels.