Your Privacy Matters at xxph.con

1. Introduction

xxph.con ("xxph.con," "we," "us," or "our") operates the online gaming platform accessible at xxphcon.org and its associated mobile applications (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all users, particularly our Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and beyond.

This Privacy Policy ("Policy") describes how xxph.con collects, uses, stores, shares, and protects personal information when you access or use the Platform. It also explains the rights you have in relation to your personal data and how you can exercise those rights.

This Policy forms part of the xxph.con Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

xxph.con collects personal data in the following categories:

2.1 Identity & Contact Data

When you register an account on xxph.con, we collect:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address (city, province, postal code)
• Nationality

2.2 Identity Verification (KYC) Data

To comply with applicable Philippine regulations and anti-money laundering requirements, xxph.con may collect:

• Government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or liveness verification image
• Source of funds documentation where required

2.3 Financial Data

xxph.con collects financial information necessary to process deposits and withdrawals, including:

• GCash or PayMaya account reference (mobile number)
• Bank account details (bank name, account number) for bank transfer transactions
• Transaction history on the Platform

xxph.con does not store full debit card numbers. Card data is handled directly by our PCI-DSS compliant payment processors.

2.4 Technical & Usage Data

When you use the xxph.con Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on the Platform
• Game session data (games played, wagers placed, outcomes)
• Login timestamps and session duration

2.5 Communications Data

If you contact xxph.con support via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments provided.

Data Category	Examples	Purpose
Identity & Contact	Name, email, phone, address	Account creation, communication
KYC / Verification	Government ID, selfie	Age verification, AML compliance
Financial	GCash number, bank account	Deposits, withdrawals
Technical & Usage	IP address, device info, game logs	Security, fraud prevention, analytics
Communications	Support chat transcripts	Customer service, dispute resolution

3. How We Use Your Personal Data

xxph.con uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your xxph.con account, including processing your registration and verifying your identity.
• Age Verification: To confirm that you meet the minimum age requirement of 21 years to use the xxph.con Platform, as required under Philippine law.
• Payment Processing: To facilitate deposits and withdrawals via GCash, PayMaya, and supported Philippine banks.
• Regulatory Compliance: To meet our obligations under applicable Philippine laws, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Platform Improvement: To analyse usage patterns and improve the features, performance, and user experience of xxph.con.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behaviour and apply responsible gaming tools such as deposit limits and self-exclusion where appropriate.
• Marketing Communications: To send you promotional offers, bonuses, and platform updates — only where you have provided consent and subject to your communication preferences.

4. Legal Basis for Processing

xxph.con processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML regulations, KYC requirements, and tax reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time.

5. Data Sharing & Disclosure

xxph.con does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary:

5.1 Service Providers

xxph.con engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, and banking partners), identity verification providers, cloud hosting services, and customer support platforms. These providers are contractually bound to process your data only on xxph.con's instructions and in accordance with applicable data protection standards.

5.2 Regulatory & Law Enforcement Authorities

xxph.con may disclose personal data to Philippine government authorities, regulatory bodies, or law enforcement agencies where required by law, court order, or regulatory directive. This includes disclosures required under AML legislation and gaming regulations.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of xxph.con's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms.

5.4 Fraud Prevention Networks

xxph.con may share limited data with industry fraud prevention networks to identify and block fraudulent accounts and transactions across the online gaming sector.

6. Cookies & Tracking Technologies

xxph.con uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use are:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your login session and security tokens. These cannot be disabled.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use xxph.con, helping us identify areas for improvement.
• Preference Cookies: Used to remember your language, display, and notification preferences across sessions.

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the xxph.con Platform.

7. Data Retention

xxph.con retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and legitimate business purposes:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years in accordance with financial record-keeping requirements.
• Support Communications: Retained for three (3) years from the date of the interaction.
• Marketing Data: Retained until you withdraw consent or for two (2) years of inactivity, whichever comes first.

Upon expiry of the applicable retention period, xxph.con will securely delete or anonymise your personal data.

8. Data Security

xxph.con implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and xxph.con servers.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to data systems.
• Incident response procedures for prompt detection, containment, and notification of data breaches.

9. Your Data Rights

As a user of xxph.con, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data xxph.con holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the xxph.con Data Protection team. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

10. Children's Privacy

xxph.con is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. The minimum age to register and use xxph.con is 21 years, in accordance with Philippine gambling regulations.

If xxph.con becomes aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, delete the data, and void any associated transactions. If you believe a minor has registered on xxph.con, please contact our support team immediately.

11. Third-Party Links

The xxph.con Platform may contain links to third-party websites or services for informational purposes. xxph.con is not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

xxph.con reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. Material changes will be communicated to registered players via email or a prominent notice on the Platform at least fourteen (14) days before taking effect.

The "Effective Date" at the top of this Policy indicates when it was last updated. Your continued use of xxph.con after the effective date of any revised Policy constitutes your acceptance of the changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by xxph.con, please contact our Data Protection team:

• Email: [email protected]
• Support: Available 24/7 via Live Chat on the xxph.con Platform

We are committed to resolving all privacy-related enquiries promptly and transparently.

© 2026 xxph.con. All rights reserved. This Privacy Policy was last updated on 1 May 2026.