Your Privacy Matters at 10ph — How We Handle Your Personal Data

1.1 Registration & Account Data

When you create a 10ph account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address, email address, and a valid Philippine mobile number. This data is necessary to create and maintain your account and to verify that you meet our eligibility requirements — including the mandatory 21-year minimum age requirement under Philippine gaming law.

1.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and Philippine anti-money laundering law (AMLA — Republic Act 9160 as amended), 10ph is required to verify the identity of all registered players. For KYC purposes, we collect copies or photographs of:

• A valid Philippine government-issued photo ID (Philippine National ID, passport, SSS ID, UMID, driver's license, or PRC ID)
• Proof of address (utility bill, bank statement, or barangay certificate dated within the last three months)
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account in your name) where required

KYC documents are processed securely and retained for the period required under Philippine regulatory law. They are not used for any purpose other than identity verification and regulatory compliance.

1.3 Financial & Transaction Data

10ph records all financial transactions associated with your account, including deposit amounts, withdrawal requests, bet placement history, bonus credits, and account balance movements. For payment processing, we collect the details necessary to facilitate transactions via your chosen payment method — GCash, PayMaya, BPI, BDO, or Metrobank. We do not store complete bank account passwords or full card numbers; sensitive payment credentials are handled by our licensed payment processing partners.

1.4 Usage & Gameplay Data

When you use the 10ph platform, we automatically collect technical and behavioral data, including:

• IP address and approximate geographic location (country and region level)
• Device type, operating system, and browser type and version
• Pages visited, session duration, and navigation patterns on the 10ph platform
• Game history, bet sizes, win/loss records, and session timing data
• Login timestamps and account activity logs

This data is used for platform security monitoring, responsible gaming analysis, fraud prevention, and to improve the overall 10ph user experience for Filipino players.

1.5 Communications Data

When you contact 10ph support via live chat or email, we retain records of your communications, including the content of messages and any attachments you send. This data is used to resolve your query, maintain a support history, and improve our service quality.

1.6 Data You Choose to Provide

From time to time, 10ph may offer optional surveys, feedback forms, or promotional participation that involve collecting additional personal information. Participation in these is entirely voluntary, and your account access is never conditional on providing this optional data.

10ph uses the personal data we collect for the following specific purposes:

2.1 Marketing Communications

If you have opted in to receive promotional communications from 10ph, we may send you information about new games, bonuses, tournaments, and special offers relevant to Filipino players — such as updates on live casino events, new slot releases, or GCash-exclusive deposit promotions. You can withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting 10ph support.

2.2 Automated Decision-Making

10ph may use automated systems for fraud detection, responsible gaming alerts, and account risk assessment. Where an automated process results in a material decision affecting your account — such as a temporary account hold — you have the right to request human review of that decision by contacting our support team.

Under the Philippine Data Privacy Act of 2012 (RA 10173), 10ph processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, KYC documents, and financial transaction data is necessary to fulfill our contract with you — i.e., to provide you with access to the 10ph platform and gaming services.
• Legal obligation: 10ph is legally required to collect and retain certain personal data under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the requirements of the National Privacy Commission of the Philippines.
• Legitimate interests: Fraud prevention, platform security monitoring, and responsible gaming analysis are conducted on the basis of 10ph's legitimate interest in operating a safe, fair, and legally compliant gaming platform.
• Consent: Marketing communications and optional data collection activities are conducted only with your prior, freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

4.1 Service Providers

10ph shares personal data with trusted third-party service providers who assist in the operation of the platform. These include:

• Payment processors — GCash (GXchange Inc.), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank for transaction processing
• KYC and identity verification providers — to assist with document review and identity confirmation
• Game content providers — such as Evolution Gaming and Pragmatic Play, who may process limited technical data to deliver game content
• Cloud infrastructure and hosting providers — for secure data storage and platform delivery
• Fraud detection and cybersecurity vendors — for platform protection and anti-money laundering screening

All third-party service providers are contractually bound by data processing agreements that require them to handle your data securely, confidentially, and only for the specific purposes we authorize.

4.2 Regulatory Disclosure

10ph may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where we are legally required to do so. Such disclosures are made in accordance with our legal obligations and are not discretionary.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets involving 10ph, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the applicable privacy terms via email and an in-platform notification before the transfer takes effect.

4.4 No Sale of Data

10ph does not sell, rent, or otherwise commercially exploit your personal data to third-party advertisers, data brokers, or marketing companies. This is an unconditional commitment.

10ph retains your personal data for the following periods:

• Account and registration data: Retained for the duration of your active account, plus a minimum of 5 years after account closure, in accordance with PAGCOR record-keeping requirements and Philippine AMLA obligations.
• KYC documents: Retained for a minimum of 5 years from the date of account closure or the last transaction, as required under the AMLA implementing rules.
• Financial transaction records: Retained for a minimum of 5 years from the transaction date.
• Customer support communications: Retained for 3 years from the date of the interaction.
• Marketing consent records: Retained for the duration of your consent plus 1 year following withdrawal of consent.
• Usage and technical data (logs): Retained for up to 12 months on a rolling basis, unless required for ongoing fraud investigation or legal proceedings.

Upon expiry of applicable retention periods, personal data is either securely deleted (digital records) or destroyed (physical records) using industry-standard irreversible methods.

10ph implements technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• TLS 1.2/1.3 encryption for all data in transit between your browser and the 10ph platform
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment information
• Two-factor authentication (2FA) available on all player accounts for enhanced login security
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments of the 10ph platform and infrastructure
• Real-time fraud detection monitoring covering login attempts, transaction patterns, and account behavior
• ISO-compliant data center security for physical server infrastructure

In the event of a personal data breach that poses a risk to your rights and freedoms, 10ph will notify the National Privacy Commission of the Philippines within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173 and its implementing rules.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 10ph:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data that 10ph holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account data, you can update most information directly in your account settings.
• Right to Erasure / Right to Be Forgotten: In certain circumstances, you may request that 10ph delete your personal data. Note that this right is subject to overriding legal obligations — for example, we cannot delete KYC or transaction records that we are legally required to retain under PAGCOR and AMLA regulations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 10ph's overriding legitimate grounds.
• Right to Data Portability: You may request that 10ph provide your personal data in a commonly used, machine-readable format, or transmit it directly to another data controller where technically feasible.
• Right to Lodge a Complaint: If you believe that your data privacy rights have been violated, you may file a complaint directly with the National Privacy Commission of the Philippines (privacy.gov.ph).

To exercise any of these rights, contact 10ph support via live chat (available 24/7 PHT) or by emailing [email protected]. We will respond to all data subject requests within 15 business days. Complex requests may take up to 30 days; we will notify you if additional time is required.

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 10ph platform. They allow the site to remember your preferences and session state across page loads and visits. 10ph uses cookies and similar tracking technologies (such as local storage and session storage) to operate the platform correctly and to improve your experience.

8.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function — including session management, login state, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to personalize your experience.
• Analytics cookies: Collect aggregated, anonymized data about how visitors use the 10ph platform to help us improve navigation and performance.
• Security and fraud prevention cookies: Used by our fraud detection systems to identify suspicious behavior and protect your account.

10ph does not use third-party advertising cookies or tracking pixels for external retargeting or ad network purposes.

8.3 Managing Cookies

You can control non-essential cookies via the cookie preferences panel available in your account settings or on your first visit to the platform. You may also manage cookies through your browser settings; however, disabling strictly necessary cookies will prevent the 10ph platform from functioning correctly.

The 10ph platform is strictly intended for persons aged 21 years and above, in compliance with Philippine gaming laws enforced by PAGCOR. 10ph does not knowingly collect personal data from individuals under the age of 21.

If 10ph discovers that personal data has been collected from a person under 21 years of age, the account will be immediately closed, all associated data will be deleted (except where required for regulatory reporting purposes), and any deposits will be returned to the original payment source subject to verification.

If you are a parent or guardian and believe that a minor has registered on the 10ph platform using false information, please contact our support team immediately at [email protected] so we can investigate and take appropriate action.

10ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, Philippine regulatory requirements, or platform functionality. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on the 10ph platform informing registered players of the key changes
• Send an email notification to your registered email address for significant changes that affect your rights

Your continued use of the 10ph platform after the updated Privacy Policy has been published constitutes your acknowledgment of the changes. We recommend reviewing this page periodically — particularly when you receive a notification of an update.

10ph has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the Philippine Data Privacy Act of 2012 and the implementing rules issued by the National Privacy Commission. The DPO is responsible for overseeing 10ph's compliance with RA 10173 and for handling data subject requests and complaints.

To contact the 10ph Data Protection Officer or to exercise any of your data subject rights:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 via your 10ph account dashboard, Philippine Standard Time (UTC+8)
• Response time: Within 15 business days of receipt of your request

For complaints that are not resolved to your satisfaction through the 10ph internal process, you may escalate your complaint to the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the NPC's official website.

10ph is committed to working constructively with the NPC and cooperating fully with any investigation or compliance review initiated by the Commission.