bingoph Privacy Policy

1 About This Privacy Policy

This Privacy Policy describes how bingoph ("we," "us," "our") collects, uses, stores, and protects the personal information of players and visitors who access the bingoph online gaming platform at bingoph.org (the "Platform").

bingoph is committed to protecting the privacy and personal data of all users in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

By registering on bingoph or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact our support team to close your account.

2 Personal Data We Collect

bingoph collects personal data that is necessary to provide the Platform's services, comply with legal obligations, and maintain a safe gaming environment. The categories of data we collect include:

2.1 Registration & Identity Data

• Full legal name, date of birth, and gender.
• Residential address (barangay, city/municipality, province, postal code).
• Email address and mobile phone number.
• Username and encrypted password.
• Government-issued ID details (for KYC verification purposes).

2.2 Financial Data

• GCash or Maya account details (registered name and mobile number).
• Philippine bank account details (bank name, account name, account number) for withdrawal processing.
• Debit card details (card number, expiry date — stored in tokenised form only; full card numbers are never stored by bingoph).
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment methods.

2.3 Gaming Activity Data

• Game session logs, including games played, wager amounts, outcomes, and session duration.
• Bonus and promotion usage history.
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

2.4 Technical & Device Data

• IP address and approximate geolocation (country/region level).
• Device type, operating system, and browser type and version.
• Cookie identifiers and session tokens.
• Platform access logs, including login timestamps and pages visited.

2.5 Communications Data

• Records of your communications with bingoph's customer support team, including live chat transcripts and email correspondence.
• Feedback and survey responses submitted voluntarily.
• Marketing communication preferences and opt-in/opt-out records.

3 How We Use Your Personal Data

bingoph processes your personal data only for specific, legitimate purposes. The table below outlines the primary purposes for which we use your data and the corresponding legal basis for each:

bingoph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by Philippine law.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, bingoph processes your personal data on the following legal grounds:

• Contract performance: Processing is necessary to fulfil our obligations to you under the bingoph Terms & Conditions — for example, to create your account, process your transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including anti-money laundering laws (AMLA), PAGCOR regulatory requirements, and the Data Privacy Act itself.
• Legitimate interest: Processing is necessary for bingoph's legitimate business interests, such as fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — particularly the sending of marketing communications — bingoph relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Third Parties

bingoph does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only where necessary and only under strict data processing agreements that require those parties to protect your data in accordance with the DPA. Categories of third parties with whom we may share data include:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), and Philippine banking partners, for the purpose of processing deposits and withdrawals. These entities are independently regulated by the Bangko Sentral ng Pilipinas (BSP).
• Identity verification providers: Third-party KYC and document verification services used to confirm player identity and age in compliance with regulatory requirements.
• Game software providers: Licensed game studios and platform providers whose games are available on bingoph. These providers may receive anonymised session data necessary to deliver game functionality.
• IT and cloud infrastructure providers: Hosting, database, and security service providers who process data on bingoph's behalf under strict contractual obligations.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where disclosure is required by law, court order, or regulatory directive.
• Professional advisers: Legal, accounting, and auditing firms, subject to professional confidentiality obligations.

6 Cookies & Tracking Technologies

bingoph uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The types of cookies we use are:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting core Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations, so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect anonymised data about how players use the Platform — such as which pages are visited most frequently and how long sessions last — to help us improve the bingoph experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and login anomaly monitoring.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the bingoph Platform, including your account login.

7 Data Security

bingoph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and the bingoph Platform is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in our databases — including passwords and financial details — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. bingoph staff are granted access only to the data necessary to perform their specific job functions, and all access is logged and audited.
• Two-factor authentication (2FA): bingoph offers 2FA for player accounts to provide an additional layer of protection against unauthorised login.
• Regular security audits: The bingoph Platform undergoes regular penetration testing and security audits conducted by independent third-party security specialists.
• Incident response: bingoph maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players within the timeframes prescribed by the DPA.
• Staff training: All bingoph personnel who handle personal data receive regular data privacy and security training.

While bingoph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your bingoph login credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

8 Data Retention

bingoph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account data: Retained for the duration of your active account relationship with bingoph, plus a minimum of five (5) years following account closure, as required by Philippine anti-money laundering regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer where the communication relates to an unresolved dispute.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent given.
• Technical and access logs: Retained for twelve (12) months for security and fraud monitoring purposes, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.

9 Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bingoph. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 13.

• Right to Access: You have the right to request a copy of the personal data bingoph holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update basic account details directly from your bingoph account dashboard.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bingoph's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data where bingoph relies on legitimate interest as the legal basis, or where your data is used for direct marketing purposes.
• Right to Restriction: You have the right to request that bingoph restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

bingoph will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

10 Children's Privacy

The bingoph Platform is strictly intended for adults aged 21 years and above. bingoph does not knowingly collect personal data from individuals under the age of 21. The Platform employs age verification procedures during registration to prevent underage access.

If bingoph becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. All funds associated with an underage account will be handled in accordance with our Terms & Conditions and applicable Philippine law.

If you are a parent or guardian and believe that your child has registered on bingoph, please contact our Data Protection Officer immediately using the contact details in Section 13.

11 Responsible Gaming & Data Processing

bingoph processes certain personal and gaming activity data specifically to support responsible gaming obligations and player welfare. This processing is carried out in the public interest and in compliance with PAGCOR's responsible gaming framework.

Responsible gaming-related data processing includes:

• Monitoring gaming patterns to identify signs of problem gambling behaviour, such as unusually long sessions, rapid escalation of wager amounts, or frequent failed withdrawal attempts.
• Storing and enforcing player-set responsible gaming limits (deposit limits, loss limits, session time limits, and cooling-off periods).
• Maintaining self-exclusion records and enforcing self-exclusion restrictions across the bingoph Platform.
• Sharing self-exclusion data with other PAGCOR-licensed operators where required by regulation, to prevent self-excluded players from accessing alternative platforms.

12 Changes to This Privacy Policy

bingoph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The "Last Updated" date at the top of this page will be revised whenever changes are made.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — bingoph will notify registered players via the email address associated with their account at least fourteen (14) days before the changes take effect.

Your continued use of the bingoph Platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the changes, you may request account closure by contacting our support team.

13 Contact Us & Data Protection Officer

bingoph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us using the details below.

When submitting a data rights request, please include your full name, registered email address, and a clear description of your request so that we can process it efficiently. bingoph may need to verify your identity before fulfilling certain requests to protect against unauthorised access to your data.

For complaints that have not been resolved to your satisfaction, you may contact the National Privacy Commission of the Philippines. Further information about the NPC and how to file a complaint is available through official Philippine government channels.