Six Things PinayPlay Commits to Every Player
Before you dive into the full policy, here's a plain-language summary of the six core commitments that define how PinayPlay handles your personal information.
We Only Collect What We Need
PinayPlay follows the principle of data minimisation. We collect only the personal information genuinely required to operate your account, process transactions, verify your identity, and comply with PAGCOR and AMLA regulations — nothing more.
We Never Sell Your Data
Your personal information is never sold, rented, or traded to any third party for their independent commercial use. Period. Any data sharing that does happen is strictly limited to what's needed to deliver our services or meet legal obligations.
Encryption & Secure Storage
All data transmitted between your device and PinayPlay servers is encrypted using industry-standard TLS protocols. Stored data is secured behind multiple layers of access controls, with regular security audits conducted throughout the year.
You Stay in Control
Philippine law gives you meaningful rights over your personal data — the right to access, correct, delete, and object to processing. PinayPlay makes exercising these rights straightforward through your account settings or by contacting our Data Protection Officer.
Full DPA Compliance
PinayPlay's data practices are designed around the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations. We are registered with the National Privacy Commission (NPC) as required by law.
Breach Notification
In the unlikely event of a data security incident that affects your personal information, PinayPlay will notify you and the National Privacy Commission within the timeframes required by the Data Privacy Act — clearly and promptly, not buried in legal language.
This Policy Applies to Everything You Do on PinayPlay
This Privacy Policy ("Policy") describes how PinayPlay ("we", "us", "our") collects, uses, stores, shares, and protects the personal information of registered members and visitors who access pinayplay.app or any related mobile interface.
By registering an account with PinayPlay, depositing funds, placing bets, or simply browsing the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the platform and contact our support team to close your account.
This Policy should be read alongside our Terms and Conditions. Where any conflict exists between the two documents, the Terms and Conditions shall prevail. PinayPlay reserves the right to update this Policy at any time. Registered members will be notified by email when material changes are made.
1. Who We Are
PinayPlay is a PAGCOR-licensed online gaming and sports betting platform operating at pinayplay.app. For the purposes of the Philippine Data Privacy Act of 2012, PinayPlay is the personal information controller responsible for your data. We have appointed a Data Protection Officer (DPO) who oversees our compliance with data privacy laws and serves as the primary point of contact for any privacy-related concerns from our members.
All data processing activities carried out by PinayPlay occur within the framework of our PAGCOR license, which imposes specific obligations regarding the collection, storage, and handling of player data — including requirements for anti-money laundering (AML) reporting under the Philippine AMLA regime.
2. Personal Data We Collect
PinayPlay collects personal data across several categories depending on the nature of your interaction with the platform. The main categories are:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number, selfie / photo verification | Yes — mandatory for KYC |
| Contact Data | Email address, Philippine mobile number, residential address | Yes — required at registration |
| Financial Data | Payment method details (GCash number, bank account name, card last four digits), transaction history | Yes — required for deposits and withdrawals |
| Gaming Activity Data | Bets placed, games accessed, session duration, win/loss records, bonus usage | Yes — generated automatically during play |
| Technical Data | IP address, device type, browser version, operating system, cookies, session tokens | Collected automatically |
| Communications Data | Support chat transcripts, emails sent to PinayPlay, survey responses | When you contact us |
| Marketing Preferences | Email subscription status, notification preferences, promo opt-ins | Optional — based on your choices |
3. How We Collect Your Data
PinayPlay collects personal data through the following channels:
- Direct from you: When you register an account, complete identity verification, make deposits or withdrawals, contact support, or respond to surveys and promotions.
- Automatically: Through cookies, server logs, and analytics tools when you access and interact with pinayplay.app or our mobile interface.
- From third parties: Identity verification service providers, payment processors (GCash, Maya, BDO, etc.), and fraud prevention partners may share data with us as part of the services they provide to PinayPlay.
- From regulatory sources: PAGCOR and other Philippine government agencies may provide or request data as part of our licensed operating obligations.
4. Why We Use Your Personal Data
PinayPlay uses your personal data for specific, documented purposes. We do not use your data for any purpose that isn't listed here unless we obtain your separate, explicit consent:
- To create and manage your PinayPlay account and verify your identity as required by PAGCOR.
- To process deposits, withdrawals, and all financial transactions on the platform.
- To detect and prevent fraud, money laundering, and other unlawful activity.
- To comply with AMLA reporting obligations and provide records to PAGCOR when lawfully required.
- To personalise your gaming experience and recommend relevant games, sports, or promotions based on your activity history.
- To send you service notifications — such as deposit confirmations, withdrawal updates, and security alerts — which are not optional as they are part of account operation.
- To send promotional and marketing communications, but only if you have opted in to receive them. You can opt out at any time.
- To operate responsible gaming tools including deposit limits, session reminders, and self-exclusion flags.
- To improve the PinayPlay platform through aggregated analytics and testing.
- To resolve disputes and enforce our Terms and Conditions.
5. Legal Basis for Processing
Under the Philippine Data Privacy Act, personal information controllers must have a lawful basis for processing personal data. PinayPlay processes your data under the following legal bases:
- Consent: For marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.
- Contractual Necessity: To fulfil our obligations under the PinayPlay Terms and Conditions — including running your account, processing bets, and paying out winnings.
- Legal Obligation: To comply with PAGCOR licensing conditions, AMLA requirements, and any order from a competent Philippine court or government authority.
- Legitimate Interests: For fraud prevention, platform security, and improving our services — provided these interests do not override your fundamental privacy rights.
6. Who We Share Your Data With
PinayPlay does not sell your personal data. We share it only in the following circumstances and only to the extent necessary:
Service Providers
We work with trusted third-party providers who process data on our behalf under strict contractual data processing agreements. These include: payment processors (GCash, Maya, BDO, BPI, UnionBank, Visa/Mastercard networks), identity verification providers, cloud hosting services, and customer support platform providers. All processors are required to handle your data in accordance with the Data Privacy Act and our instructions.
Regulatory and Law Enforcement
PinayPlay will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government bodies when required by law, court order, or our licensing obligations. We will notify you of such disclosures where we are legally permitted to do so.
Business Transfers
In the event of a merger, acquisition, or sale of PinayPlay's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified in advance of such a transfer and given the option to close your account if you do not wish your data to be transferred.
7. How Long We Keep Your Data
PinayPlay retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following guidelines:
- Active account data: Retained for the lifetime of your account plus five (5) years after account closure, as required by PAGCOR and AMLA regulations.
- Transaction records: Financial and betting transaction logs are retained for a minimum of five (5) years to comply with AMLA and Bureau of Internal Revenue (BIR) requirements.
- Identity verification documents: Retained for five (5) years from the date of verification, or longer if required by an ongoing regulatory matter.
- Support communications: Retained for three (3) years from the date of the last interaction.
- Marketing preferences: Retained until you withdraw consent or close your account.
After the applicable retention period, data is securely deleted or anonymised in a way that cannot be reversed to identify you.
8. How We Protect Your Data
PinayPlay implements a layered security programme to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:
- End-to-end TLS encryption for all data transmitted between your device and our servers.
- Encrypted storage for sensitive data including identity documents and financial information.
- Role-based access controls ensuring that only authorised PinayPlay staff with a documented need can access player personal data.
- Regular penetration testing and vulnerability assessments by qualified third-party security firms.
- Multi-factor authentication requirements for internal system access by PinayPlay staff.
- Comprehensive logging and monitoring of access to personal data systems.
9. Your Privacy Rights Under Philippine Law
The Philippine Data Privacy Act of 2012 gives you the following rights regarding your personal data held by PinayPlay. You can exercise any of these rights by contacting our Data Protection Officer at the details provided in Section 14.
Right to Access
Request a copy of the personal data PinayPlay holds about you, along with information about how it is being processed and the purposes for which it is used.
Right to Correction
Request that inaccurate or outdated personal data be corrected. Basic details such as your email address and phone number can be updated directly in your account settings at any time.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, or where you have withdrawn consent. Note that data subject to legal retention obligations (such as AML records) cannot be deleted before the mandatory retention period expires.
Right to Object
Object to the processing of your personal data for direct marketing purposes at any time. You can also object to processing based on legitimate interests, though we may demonstrate that we have compelling grounds to continue.
Right to Data Portability
Request a structured, machine-readable copy of your personal data that you have provided to PinayPlay, so you can transfer it to another service if you choose.
Right to Lodge a Complaint
If you believe PinayPlay has not handled your personal data appropriately, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines.
10. Cookies and Tracking Technologies
PinayPlay uses cookies and similar technologies (local storage, session tokens, pixels) to operate the platform and improve your experience. Here's a breakdown of what we use and why:
- Essential Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in securely. You cannot opt out of essential cookies without stopping use of the platform.
- Analytics Cookies: Help us understand how players interact with PinayPlay — which pages are visited most, where players drop off, and what features are most used. This data is aggregated and anonymised. You can opt out through your browser settings.
- Preference Cookies: Remember your settings such as odds format, language, and notification preferences so you don't have to reset them every session.
Most browsers allow you to control cookies through their settings. Disabling non-essential cookies won't prevent you from using PinayPlay's core features, but some personalisation features may not work as expected.
11. Minors and Age Restriction
PinayPlay strictly prohibits participation by anyone under the age of 21 years. We do not knowingly collect personal data from individuals under this age. If we discover that an account has been opened by a person under 21, the account will be immediately suspended, and any personal data associated with it will be deleted as soon as legal and regulatory obligations permit.
If you believe a minor has registered on PinayPlay using false information, please contact us at support@pinayplay.app so we can investigate and act immediately.
12. Cross-Border Data Transfers
PinayPlay processes and stores the majority of player data within the Philippines. In limited circumstances — such as where cloud infrastructure or third-party service providers operate servers in other jurisdictions — data may be transferred outside the Philippines.
Where such transfers occur, PinayPlay ensures they are carried out in compliance with the Data Privacy Act, including using appropriate contractual safeguards with the receiving parties to ensure your data receives the same level of protection it would within the Philippines.
13. Changes to This Privacy Policy
PinayPlay may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Send a notification to your registered email address summarising the key changes.
- In some cases, ask for your renewed consent where the changes affect how we process data based on your consent.
We encourage you to review this Policy periodically so you stay informed about how PinayPlay protects your personal information. Your continued use of the platform after a Policy update constitutes your acknowledgment of the revised terms.
14. Contact Our Data Protection Officer
For any questions, access requests, correction requests, or formal complaints related to your personal data on PinayPlay, please contact our designated Data Protection Officer:
Email: support@pinayplay.app
Website: pinayplay.app
Subject Line: Data Privacy Request – [Your Full Name]
We aim to respond to all privacy-related requests within 15 business days of receipt. For complex requests, we may require up to 30 days and will notify you of the extended timeline. Identity verification may be required before we act on a request to ensure we are speaking with the account holder.
If you are unsatisfied with PinayPlay's response to your privacy request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through their official website and complaint channels.