peryaph Privacy Policy

1 Introduction

peryaph ("peryaph", "we", "us", "our") operates the online gaming platform accessible at peryaph.net and is committed to protecting the privacy and personal data of all users ("you", "your", "Player") in accordance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy describes how peryaph collects, uses, stores, shares, and protects your personal data when you visit our website, register an account, make deposits or withdrawals, play games, or interact with our customer support team. It also sets out your rights as a data subject and how you can exercise them.

This Privacy Policy should be read alongside peryaph's Terms and Conditions, which govern your use of the platform. Capitalised terms not defined in this Policy carry the meaning given to them in the Terms and Conditions.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection regulations, peryaph acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes through the peryaph platform. As PIC, peryaph determines the purpose and means by which your personal data is processed.

Where peryaph engages third-party service providers — such as payment processors, KYC verification partners, or game software providers — to process personal data on its behalf, those third parties act as Personal Information Processors (PIPs) under data processing agreements that bind them to process your data only in accordance with peryaph's documented instructions and applicable law.

3 Data We Collect

3.1 Data You Provide Directly

When you interact with the peryaph platform, you provide us with personal data directly in the following circumstances:

• Registration: Full name, date of birth, email address, mobile number, residential address, username, and password (stored in hashed form).
• KYC Verification: Government-issued photo ID (e.g., Philippine passport, PhilSys National ID, driver's license, UMID card), proof of address documents, and selfie photographs as required by PAGCOR and AMLC regulations.
• Financial Transactions: GCash or PayMaya mobile number, bank account details, card numbers (partial, tokenised), and transaction records relating to deposits and withdrawals.
• Support Interactions: Communications you send to our support team via live chat, email, or any other channel, including the content of your messages and any attachments you provide.
• Responsible Gaming Tools: Deposit limit preferences, session time settings, self-exclusion requests, and cooling-off period elections.

3.2 Data We Collect Automatically

When you access the peryaph platform, certain technical data is collected automatically through server logs, cookies, and similar tracking technologies:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser type and version.
• Pages visited, session duration, click-path, and feature usage data.
• Timestamps of login, logout, and gaming session start/end events.
• Referral source (the URL or platform from which you accessed peryaph).

3.3 Data From Third Parties

peryaph may receive personal data about you from third-party sources in limited circumstances, including from payment processors confirming transaction status, from KYC verification bureaus confirming the authenticity of your identity documents, and from fraud prevention services providing risk scores or watchlist screening results.

4 How We Use Your Data

peryaph processes your personal data for the following purposes and on the corresponding legal bases under the Data Privacy Act of 2012:

• Account management and platform access — to create, maintain, and administer your peryaph account, and to authenticate you each time you log in. Legal basis: contractual necessity.
• KYC and age verification — to verify your identity, confirm that you are at least 21 years of age in compliance with PAGCOR regulations, and to prevent underage gambling. Legal basis: legal obligation.
• Payment processing — to process your deposits via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, and to process your withdrawal requests to your verified payment method. Legal basis: contractual necessity.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct on the platform. Legal basis: legitimate interests; legal obligation.
• Regulatory compliance — to fulfil our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws, including filing of suspicious transaction reports with the AMLC where required. Legal basis: legal obligation.
• Customer support — to respond to your queries, complaints, and support requests, and to maintain records of our interactions for quality assurance and dispute resolution purposes. Legal basis: contractual necessity; legitimate interests.
• Responsible gaming — to monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, and to administer self-exclusion, deposit limits, and other responsible gaming tools. Legal basis: legal obligation; legitimate interests.
• Platform improvement — to analyse usage data in order to improve the performance, features, and user experience of the peryaph platform. Legal basis: legitimate interests.
• Marketing communications — to send you promotional offers, bonus notifications, and news about peryaph products, but only where you have given your express consent during registration or at any subsequent time. Legal basis: consent.

5 Sharing Your Data

peryaph does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers

We share personal data with trusted third-party service providers who process it strictly on our behalf and under our instructions, including:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard — for transaction processing.
• KYC and identity verification partners for document authentication and biometric verification.
• Cloud hosting and infrastructure providers who store peryaph's systems and databases.
• Game software providers who supply the slot, live casino, bingo, and Color Game titles available on peryaph, where such providers need to process player session data to deliver the game.
• Customer support platform providers who power our live chat system.

5.2 Regulatory and Law Enforcement Authorities

peryaph is legally required to disclose personal data to the following authorities where applicable law demands it:

• PAGCOR — for regulatory reporting, audit, and licensing compliance purposes.
• Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting and investigation.
• National Privacy Commission (NPC) — in the event of a personal data breach notification obligation.
• Philippine law enforcement agencies — in response to a valid court order, warrant, or lawful request.

5.3 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of peryaph's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via your registered email address before your data becomes subject to a materially different privacy policy.

6 Cookies & Tracking Technologies

peryaph uses cookies and similar tracking technologies on its website and platform to ensure proper functionality, improve your experience, and gather analytics data. Below is a summary of the types of cookies we use:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery (CSRF). These cookies cannot be disabled.
• Functional Cookies: Remember your preferences, such as your preferred language, responsible gaming settings, and display preferences. Disabling these may affect your experience.
• Analytics Cookies: Help us understand how players interact with the peryaph platform — which pages are visited most, where players encounter errors, and how navigation flows are used. This data is aggregated and anonymised where possible.
• Marketing Cookies: Used only where you have consented to receive personalised promotional content. These cookies help us show you bonus offers and promotions that are relevant to your gaming preferences on peryaph.

You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing the peryaph platform. For more granular control over marketing cookies, you may update your preferences in your peryaph account settings.

7 Data Security

peryaph implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security controls include:

• Encryption in Transit: All data transmitted between your device and peryaph's servers is protected using TLS 1.2 or higher, enforced via HTTPS.
• Encryption at Rest: Sensitive personal data stored on peryaph's servers — including identity documents and financial records — is encrypted using AES-256.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All peryaph employees and contractors with access to personal data are subject to confidentiality obligations and undergo regular data protection training.
• Intrusion Detection: peryaph operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Penetration Testing: The peryaph platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities.
• Two-Factor Authentication: peryaph supports two-factor authentication (2FA) for player accounts as an additional layer of login security.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, peryaph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act and NPC Circular No. 16-03.

8 Data Retention

peryaph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and KYC records: Retained for a minimum of five (5) years from the date of account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLC regulations.
• Support communications: Retained for three (3) years from the date of the relevant communication, for dispute resolution and service quality purposes.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, at which point it is deleted within thirty (30) days.
• Technical and log data: Retained for twelve (12) months for security monitoring and fraud detection purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, peryaph will securely delete or anonymise your personal data in accordance with NPC-recommended data disposal standards.

9 Cross-Border Data Transfers

peryaph's primary operations and data storage are based in the Philippines. However, some of peryaph's third-party service providers — including game software providers and cloud infrastructure partners — may be located outside the Philippines and may process your personal data in their respective jurisdictions.

Where personal data is transferred outside the Philippines, peryaph ensures that appropriate safeguards are in place to protect your data, including contractual data transfer agreements that impose data protection obligations equivalent to those required under the Data Privacy Act of 2012. Transfers are only made to jurisdictions or recipients that provide an adequate level of data protection as assessed by peryaph's Data Protection Officer.

10 Minors & Age Policy

The peryaph platform is strictly for individuals who are at least 21 years of age, in accordance with PAGCOR regulations governing online gaming in the Philippines. peryaph does not knowingly collect personal data from individuals under the age of 21.

All registration applicants are required to confirm that they are 21 years of age or older during the sign-up process and to provide government-issued proof of age as part of the KYC verification procedure. Where peryaph discovers that personal data has been collected from an individual who is under 21 years of age, peryaph will:

• Immediately suspend and permanently close the relevant account.
• Void all pending and historical transactions on the account.
• Delete the personal data of the underage individual as promptly as possible, subject to any mandatory retention obligations imposed by law.
• Refer the matter to PAGCOR and, where appropriate, to the relevant Philippine authorities.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by peryaph:

• Right to be Informed: The right to be told how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: The right to obtain confirmation of whether peryaph processes personal data about you and, if so, to receive a copy of that data and information about how it is used.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected or updated. You may update basic account details directly in your peryaph account settings.
• Right to Erasure: The right to request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful — subject to overriding legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes, or where processing is based on peryaph's legitimate interests, in circumstances where your interests override ours.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe that peryaph has violated your data privacy rights.

To exercise any of the rights listed above, please contact peryaph's Data Protection Officer through the channels described in Section 14. We will respond to all valid data subject requests within thirty (30) days of receipt, in accordance with NPC requirements. Complex requests may require up to an additional thirty (30) days, in which case we will notify you of the extension.

12 Marketing Communications

peryaph will only send you promotional communications — including bonus offers, free credit notifications, tournament announcements, and platform news — where you have given your prior express consent. Consent to receive marketing communications is requested during the account registration process and can be withdrawn at any time.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included at the bottom of any marketing email sent by peryaph.
• Updating your communication preferences in your peryaph account settings.
• Contacting our support team via live chat and requesting removal from all marketing lists.

Please note that even if you opt out of marketing communications, peryaph will continue to send you transactional and account-related communications that are necessary for the administration of your account — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts. These are not marketing communications and cannot be opted out of while your account remains active.

13 Changes to This Privacy Policy

peryaph reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform features. The effective date at the top of this page will be updated whenever changes are made.

For material changes — those that significantly affect how we collect or use your personal data, or that expand your obligations or reduce your rights — peryaph will provide at least fourteen (14) days' advance notice via your registered email address or through a prominent in-platform notification, before the revised policy takes effect.

Your continued use of the peryaph platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the revised Privacy Policy, you must stop using the platform and request account closure before the changes take effect.

14 Contact & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or peryaph's data processing practices, or if you wish to exercise any of your data subject rights under the Data Privacy Act of 2012, please contact the peryaph Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the peryaph platform — fastest response, typically 3–5 minutes with a real Filipino agent.
• Email: [email protected] (plain text — not a clickable link; please copy and paste into your email client).

Our Data Protection Officer will acknowledge receipt of your request within three (3) business days and provide a substantive response within thirty (30) days, as required by the Data Privacy Act and NPC Circular No. 16-03.

If you are not satisfied with peryaph's response to your complaint or request, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent supervisory authority responsible for enforcing the Data Privacy Act. Information on how to file a complaint with the NPC is available on the NPC's official website.