StakesPH Privacy Policy — Your Data, Your Rights, Our Commitment

StakesPH operates the online gaming platform available at stakesph.app. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), StakesPH is the Personal Information Controller — meaning we are the entity that determines the purposes and means of processing personal data collected through our platform.

Our Data Protection Officer (DPO) can be contacted directly at support@stakesph.app for any queries specifically relating to your personal data, your rights under RA 10173, or to report a privacy concern. We take our obligations as a Personal Information Controller seriously and have internal policies and procedures in place to ensure compliance with Philippine privacy law.

StakesPH collects personal data in two broad categories — data you provide directly and data generated automatically through your use of the platform.

Data you provide directly:

• Full legal name and date of birth (required for account registration and age verification)
• Philippine mobile number and email address (required for account setup and two-factor authentication)
• Residential address in the Philippines (required for KYC verification above certain transaction thresholds)
• Government-issued identification documents — such as Philippine passport, PhilSys national ID, SSS card, driver's licence, or UMID card — submitted during KYC verification
• Proof of address documents — such as utility bills, bank statements, or Barangay clearance — submitted during KYC verification
• Payment method details — GCash number, Maya account, bank account name and number, or card details (card numbers are tokenised and never stored in full by StakesPH)
• Communications you send to StakesPH — live chat transcripts, emails, and any other messages you direct to our support team
• Responsible gaming declarations — if you set deposit limits, cooling-off periods, or self-exclusion on your account

Data collected automatically:

• IP address and approximate location data derived from it
• Device type, operating system, browser type and version
• Session data — pages visited, time spent, game history, betting patterns
• Cookie data and similar tracking technologies (described in Section 9)
• Transaction records — all deposits, withdrawals, bets, and bonus activations associated with your account

StakesPH collects personal data through the following means:

• Account registration: When you create a StakesPH account, you provide your name, date of birth, email address, and Philippine mobile number.
• KYC verification: When your account reaches transaction thresholds that require identity verification, you submit identification documents and proof of address through our secure upload portal.
• Deposits and withdrawals: When you initiate financial transactions, payment processing systems capture the necessary payment method details to process the transaction.
• Platform activity: Our servers automatically log session data, device information, IP addresses, and gameplay activity as part of normal platform operation.
• Support interactions: When you contact StakesPH via live chat or email, your messages and account context are recorded to support resolution of your query.
• Cookies and similar technologies: When you visit stakesph.app, our platform uses cookies and similar tracking technologies as described in Section 9 of this Privacy Policy.

StakesPH does not purchase personal data from third-party data brokers. We do not scrape personal data from social media platforms. We do not acquire contact lists for marketing purposes. All personal data we hold about you was provided by you directly or generated through your use of our platform.

StakesPH uses personal data only for legitimate purposes directly connected to providing and improving our Service, meeting our legal obligations, and protecting the safety and security of our platform and players. Specifically, we use your data for the following purposes:

• Account management: To create and maintain your StakesPH account, verify your identity, process logins, and maintain account security.
• Payment processing: To process deposits and withdrawals, verify that payment methods belong to the account holder, and maintain transaction records.
• KYC and AML compliance: To verify your age and identity, fulfil our Know Your Customer obligations, and detect and prevent money laundering and financial crime as required under Philippine anti-money laundering law.
• Service delivery: To enable you to access and play games, participate in promotions, and use all features of the StakesPH platform.
• Responsible gaming: To enforce deposit limits, cooling-off periods, and self-exclusion decisions you have made, and to identify patterns of play that may indicate problem gambling behaviour requiring intervention.
• Fraud prevention and security: To detect and prevent fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct outlined in our Terms and Conditions.
• Customer support: To respond to queries, resolve disputes, and maintain a record of support interactions.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive these and have not subsequently opted out.
• Platform improvement: To analyse aggregated usage data, identify technical issues, and improve the performance and usability of the StakesPH platform.
• Legal compliance: To meet our obligations under Philippine law including RA 10173, the Anti-Money Laundering Act, and any applicable gaming regulatory requirements.

Under RA 10173, StakesPH may only process your personal data where there is a lawful basis for doing so. We rely on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you agreed to when creating your account — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with Philippine laws including anti-money laundering regulations, tax obligations, and gaming regulatory requirements.
• Legitimate interest: Processing necessary for our legitimate business interests — such as fraud prevention, security monitoring, and platform improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent — specifically, sending marketing communications. You can withdraw this consent at any time by unsubscribing from marketing emails or adjusting your communication preferences in your account settings.

StakesPH does not process sensitive personal data (as defined by RA 10173) except where strictly required for age and identity verification, and only with appropriate security measures in place.

StakesPH does not sell your personal data. We do not share your data with advertising networks, data brokers, or social media companies. Personal data is shared only with the following categories of third-party service providers, and only to the extent necessary for the specific purpose:

• KYC and identity verification providers: Licensed third-party services that help us verify your identity and age as required by our regulatory obligations. These providers process only the specific documents needed for verification and are contractually bound to handle data in accordance with RA 10173.
• Payment processors: GCash (Mynt), Maya (Voyager Innovations), and other licensed Philippine payment service providers process financial transactions on our behalf. These providers are regulated by the Bangko Sentral ng Pilipinas (BSP) and maintain their own data protection obligations.
• Game content providers: Licensed game providers whose software runs games on the StakesPH platform may receive session identifiers to verify game integrity. They do not receive your name, payment details, or contact information.
• Cloud infrastructure providers: StakesPH uses secure cloud hosting services to operate our platform. These providers store data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, court order, or the direction of a competent Philippine regulatory authority including the National Privacy Commission.

StakesPH retains personal data only for as long as it is necessary for the purpose it was collected, or as required by law. The following general retention periods apply:

• Account data (name, contact details, account settings): Retained for the duration of your active account, plus 5 years after account closure as required for regulatory compliance.
• Transaction records (deposits, withdrawals, bet history): Retained for 7 years after the transaction date in accordance with Philippine anti-money laundering record-keeping requirements.
• KYC documents (ID copies, proof of address): Retained for 5 years after account closure or after the document was submitted, whichever is longer, as required under AML regulations.
• Support communications: Retained for 2 years after the last communication in the relevant support thread.
• Marketing consent records: Retained for 3 years from the date of consent or last interaction, to demonstrate compliance with consent requirements.

When data is no longer required and no legal retention obligation applies, StakesPH securely deletes or anonymises it so that it can no longer be linked to any individual. Anonymised, aggregated data (with no personal identifiers) may be retained indefinitely for statistical and business improvement purposes.

StakesPH implements a layered approach to data security, combining technical controls, physical safeguards, and operational procedures. The following security measures are in place across all StakesPH systems that handle personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and StakesPH servers — the same standard used by Philippine banks for online banking.
• Encryption at rest for sensitive personal data and KYC documents stored in our database infrastructure.
• Access controls: Personal data is accessible only to StakesPH personnel who have a specific, documented operational need. Access is logged and regularly audited.
• Two-factor authentication required for all staff accessing systems containing personal data.
• Regular security assessments including vulnerability scanning and penetration testing of our platform infrastructure.
• Payment tokenisation: Card payment details are tokenised by certified payment processors and never stored in full on StakesPH systems.
• Incident response procedures: A documented data breach response plan is in place, with defined escalation procedures and NPC notification timelines as required under RA 10173.

No system is completely immune to security threats. If you suspect that your StakesPH account has been compromised, contact our support team immediately via live chat so we can take steps to secure your account.

StakesPH uses cookies and similar technologies to make the platform work properly, improve your experience, and understand how the platform is being used. A cookie is a small text file stored on your device when you visit a website. They don't contain personal information like your name or payment details — but they help us recognise your browser and remember your preferences between sessions.

The following types of cookies are used on stakesph.app:

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling certain cookies may affect the functionality of the StakesPH platform.

StakesPH may send you promotional communications — such as bonus notifications, payday reload reminders, VIP Club updates, and new game announcements — by email and SMS. We will only send these if you have opted in to receiving marketing communications when registering your account or subsequently through your account settings.

Every marketing email we send includes an unsubscribe link. SMS marketing messages include instructions on how to opt out. You can also update your communication preferences at any time in the Notifications section of your StakesPH account settings, or by contacting support.

StakesPH does not send marketing communications to:

• Players who have opted out of marketing
• Players who are under a self-exclusion or cooling-off period
• Players who have closed their account

Opting out of marketing communications has no effect on your ability to use your StakesPH account. You will continue to receive transactional messages — such as deposit confirmations, withdrawal notifications, and security alerts — regardless of your marketing preferences, as these are necessary for account management.

StakesPH is strictly for persons aged 21 and above, in accordance with Philippine gaming law. We do not knowingly collect or process personal data from any person under 21 years of age. Our registration process includes age declaration requirements, and KYC verification is used to confirm age before certain account activities are permitted.

If we become aware that personal data from a person under 21 has been collected through our platform, we will immediately suspend the relevant account, delete all associated personal data that is not required to be retained for regulatory purposes, and report the matter as required under applicable law.

If you believe that a person under 21 has created a StakesPH account, please contact us immediately at support@stakesph.app.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights in relation to your personal data held by StakesPH. These rights apply to all StakesPH players regardless of account status.

• Right to be informed: You have the right to know what personal data we collect, how it is used, with whom it is shared, and how long it is retained. This Privacy Policy fulfils that obligation.
• Right to access: You may request a copy of all personal data we hold about you. Contact our DPO at support@stakesph.app with a valid access request.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. To exercise this right, unsubscribe from marketing communications or contact support.
• Right to erasure or blocking: You may request deletion or blocking of your personal data where it is incomplete, outdated, false, unlawfully obtained, or no longer needed for the stated purpose, subject to our legal retention obligations.
• Right to damages: If your rights under RA 10173 have been violated, you may be entitled to compensation for any damages suffered.
• Right to file a complaint: You may lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.
• Right to data portability: You may request your personal data in a structured, machine-readable format for the purposes of transferring it to another data controller.

To exercise any of these rights, contact StakesPH at support@stakesph.app with the subject line "Data Privacy Request." We will respond within 15 business days and may require you to verify your identity before processing the request.

In the event of a personal data breach — an incident involving unauthorised access to, disclosure of, or loss of personal data held by StakesPH — we will follow our incident response procedures and comply with the breach notification requirements under RA 10173 and NPC Circular 16-03.

Where a breach is likely to result in serious harm to affected data subjects, StakesPH will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and notify affected players as soon as reasonably practicable thereafter. Notifications will include a description of the breach, the personal data categories involved, the likely consequences, and the steps StakesPH has taken or plans to take to address the breach and prevent recurrence.

If you believe your StakesPH account has been compromised or that your personal data may have been accessed without your authorisation, contact our support team immediately via live chat so we can investigate and take immediate action to secure your account.

StakesPH may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes — meaning changes that significantly affect how your personal data is handled — we will notify registered players via email and display a prominent notice on the platform for at least 14 days before the changes take effect.

Minor updates — such as clarifications that don't change the substance of our data practices — may be made without advance individual notice, but the "last updated" date at the top of this page will always reflect when the Policy was most recently revised.

We encourage you to review this Privacy Policy periodically. Your continued use of StakesPH after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated practices.

For any questions about this Privacy Policy, to exercise your data privacy rights, or to raise a privacy concern, contact StakesPH through the following channels:

• Email (Data Privacy Requests): support@stakesph.app — use subject line "Data Privacy Request" for fastest routing to our DPO.
• Live Chat: Available 24/7 through the StakesPH platform for general privacy questions and urgent account security concerns.

For complaints that cannot be resolved directly with StakesPH, you may contact the National Privacy Commission (NPC) of the Philippines — the supervisory authority responsible for enforcing RA 10173. Information on filing a complaint with the NPC can be found on their official website at privacy.gov.ph.