xxph.com is committed to protecting your personal information. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and the rights you hold as a data subject under Philippine law.
xxph.com processes all personal data in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173).
All data transmitted between your device and xxph.com is protected by industry-standard TLS/SSL encryption.
xxph.com never sells, rents, or trades your personal information to third-party marketers or data brokers.
You have the right to access, correct, delete, and port your personal data held by xxph.com at any time.
We clearly disclose every category of cookie used on xxph.com and give you meaningful control over non-essential cookies.
xxph.com has appointed a Data Protection Officer (DPO) to oversee compliance and handle all data-related enquiries.
xxph.com ("we," "us," "our," or "the Platform") takes the privacy of every Filipino player seriously. We understand that when you share your personal information with us — whether during registration, KYC verification, or day-to-day use of the Platform — you are placing trust in us to handle that information responsibly.
This Privacy Policy sets out in plain, clear language how xxph.com collects, uses, stores, shares, and protects your personal data. It also explains the rights you have under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, and how you can exercise those rights.
This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and xxph.com.
For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, xxph.com is the personal information controller responsible for the personal data collected through the Platform. xxph.com has registered with the National Privacy Commission (NPC) of the Philippines as required by applicable law.
xxph.com has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy and implementation, ensuring compliance with the DPA 2012, and serving as the primary point of contact for data subjects and the NPC. Contact details for the DPO are provided in Section 16 of this Policy.
xxph.com collects the following categories of personal data, depending on how you interact with the Platform:
xxph.com collects personal data through the following means:
xxph.com processes your personal data for the following specific, legitimate purposes:
| Purpose | Description | Legal Basis |
|---|---|---|
| Account Management | Creating, maintaining, and administering your xxph.com player account | Contractual necessity |
| Identity Verification | KYC checks to confirm your identity, age (21+), and eligibility to use the Platform | Legal obligation; contractual necessity |
| Payment Processing | Processing deposits and withdrawals in Philippine Peso via approved payment methods | Contractual necessity |
| Regulatory Compliance | Meeting obligations under Philippine AML law, PAGCOR regulations, and the DPA 2012 | Legal obligation |
| Responsible Gaming | Monitoring gaming behaviour, enforcing limits, and managing self-exclusion requests | Legal obligation; legitimate interest |
| Fraud Prevention | Detecting and preventing fraud, money laundering, and other prohibited conduct | Legal obligation; legitimate interest |
| Customer Support | Responding to enquiries, resolving disputes, and managing complaints | Contractual necessity; legitimate interest |
| Platform Improvement | Analysing usage patterns to improve Platform performance, features, and user experience | Legitimate interest |
| Marketing & Promotions | Sending promotional offers, bonus notifications, and personalised recommendations (where you have opted in) | Consent |
| Legal Claims | Establishing, exercising, or defending legal claims involving xxph.com | Legitimate interest; legal obligation |
Under the Data Privacy Act of 2012, xxph.com relies on the following legal bases for processing your personal data:
xxph.com does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances and only to the extent necessary for the stated purpose:
xxph.com engages trusted third-party service providers who process personal data on our behalf under written data processing agreements that require them to maintain appropriate security standards and process data only on xxph.com's documented instructions. These include:
xxph.com may disclose personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), PAGCOR, the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and are documented in accordance with our internal compliance procedures.
In the event of a merger, acquisition, restructuring, or sale of all or part of xxph.com's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred, and you will retain all rights under the DPA 2012.
xxph.com may share your personal data with third parties in any other circumstances where you have given your explicit prior consent to such sharing.
xxph.com retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML / regulatory requirement |
| KYC / identity documents | Duration of account + 5 years after closure | RA 9160 (AMLA) requirement |
| Transaction records | Duration of account + 5 years after closure | RA 9160 (AMLA) / BIR requirement |
| Gaming activity logs | Duration of account + 2 years after closure | Regulatory / dispute resolution |
| Customer support records | 3 years from last interaction | Legitimate interest / legal claims |
| Marketing preferences | Until consent withdrawn or account closed | Consent |
| Cookie / technical data | Up to 13 months (session cookies: until browser closed) | Legitimate interest / consent |
| Self-exclusion records | Minimum 7 years from exclusion date | Responsible gaming obligation |
Upon expiry of the applicable retention period, xxph.com will securely delete or anonymise your personal data in accordance with our data disposal procedures. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.
xxph.com implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
While xxph.com takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for keeping your xxph.com Login credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.
xxph.com uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) to operate the Platform, remember your preferences, analyse usage, and — where you have consented — deliver relevant promotional content.
| Category | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Essential for the Platform to function — session management, security tokens, login state, load balancing | No (always active) |
| Functional | Remembering your language preference, game lobby layout, and responsible gaming settings | No (legitimate interest) |
| Analytics | Understanding how players use the Platform to improve performance and user experience (aggregated, anonymised data) | Yes |
| Marketing | Delivering personalised promotional content and measuring the effectiveness of xxph.com campaigns | Yes |
You can manage your cookie preferences through the cookie consent banner displayed when you first visit xxph.com, or by adjusting your browser settings to block or delete cookies. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing certain features, including your account.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by xxph.com:
xxph.com strictly prohibits the use of the Platform by persons under 21 years of age, in accordance with Philippine gambling regulations. xxph.com does not knowingly collect personal data from individuals under 21 years of age.
If xxph.com becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately, the associated account will be suspended, and any funds held in that account will be dealt with in accordance with our Terms & Conditions.
If you are a parent or guardian and believe that your child under 21 has provided personal data to xxph.com, please contact our DPO immediately using the details in Section 16 so that we can take appropriate action.
Some of xxph.com's service providers and technology partners may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, xxph.com ensures that appropriate safeguards are in place to protect your data in accordance with the DPA 2012 and NPC guidelines on cross-border data transfers.
Such safeguards may include contractual clauses approved by the NPC, binding corporate rules, or transfers to countries that have been assessed as providing an adequate level of data protection. xxph.com will not transfer your personal data to a third country unless one of these safeguards is in place.
The xxph.com Platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to data collected by xxph.com and does not cover the privacy practices of any third-party websites. xxph.com is not responsible for the content or privacy practices of any third-party sites and encourages you to review the privacy policies of any external sites you visit.
xxph.com reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, xxph.com will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.
The effective date at the top of this Policy will be updated whenever changes are made. We encourage you to review this Privacy Policy periodically. Your continued use of the xxph.com Platform after the effective date of any revised Policy constitutes your acknowledgement of the changes.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by xxph.com, please contact our Data Protection Officer:
If you are not satisfied with xxph.com's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.
For responsible gaming concerns, self-exclusion requests, or account restriction queries, please visit our Responsible Gaming page or contact support directly. All responsible gaming requests are treated with priority and strict confidentiality.
Now that you know how xxph.com safeguards your personal data, explore the full casino experience — live tables, slots, bingo, and more — all in Philippine Peso with GCash and Maya support.
21+ Only Play responsibly. Gambling is entertainment, not a source of income. Gambling is addictive. Know when to stop.