loveph Casino Privacy Policy

1. Introduction

This Privacy Policy ("Policy") applies to all personal data processed by loveph Casino ("loveph," "we," "us," or "our") in connection with the operation of the loveph website and all associated gaming services (collectively, the "Platform"). It applies to all registered players, prospective players, and visitors to the loveph website, regardless of whether they are located in Metro Manila, Cebu, Davao, Quezon City, or any other part of the Philippines.

loveph is committed to handling your personal data responsibly, transparently, and in full compliance with the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account with loveph or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the loveph Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, loveph Casino is the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. As PIC, loveph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data privacy law.

loveph has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection compliance within the organisation. Contact details for the DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

loveph collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth
• Residential address (including barangay, city/municipality, province)
• Email address
• Philippine mobile number
• Nationality

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., PhilSys National ID, passport, LTO driver's license, UMID, COMELEC Voter's ID)
• Proof of address documents
• Selfie or liveness verification image (where required)
• Source of funds documentation (for large deposits or withdrawals)

3.3 Financial Data

• GCash or PayMaya / Maya account reference (masked)
• Bank account details (bank name, account number — masked after verification)
• Debit card details (card number masked; only last four digits retained)
• Transaction history (deposits, withdrawals, bonus credits)

3.4 Gaming and Account Activity Data

• Game history, bet amounts, win/loss records
• Session duration and login timestamps
• Responsible gaming settings (deposit limits, self-exclusion status)
• Bonus and promotion participation records
• Customer support interaction records

3.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Cookie identifiers and session tokens
• Platform access logs

4. How We Collect Your Data

loveph collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device information, and cookie data.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment verification data from payment processors (GCash, Maya, banks).
• Regulatory sources: Self-exclusion status from PAGCOR's exclusion register or other recognised gaming authority registers.

5. How We Use Your Personal Data

loveph uses your personal data for the following purposes:

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, loveph processes your personal data on the following legal bases:

• Contract performance: Processing necessary to register your account, provide gaming services, and process financial transactions.
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money laundering laws (AMLA, RA 9160 as amended), and NPC requirements.
• Legitimate interest: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where you have given explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

loveph does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

7.1 Service Providers

Third-party service providers who assist loveph in operating the Platform, including KYC and identity verification providers, payment processors (GCash, Maya, and partner banks), fraud detection and AML screening providers, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually bound to process your data only on loveph's instructions and in accordance with applicable Philippine data privacy law.

7.2 Regulatory and Law Enforcement Authorities

loveph may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and will be documented in accordance with our internal compliance procedures.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of loveph's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred, and you will retain all rights afforded to you under this Policy and applicable law.

7.4 Cross-Border Transfers

Where loveph transfers your personal data outside the Philippines — for example, to cloud infrastructure providers with servers located abroad — such transfers are conducted in accordance with the cross-border transfer requirements of the Data Privacy Act of 2012 and NPC guidelines. loveph ensures that adequate safeguards are in place, including contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law.

8. Cookies & Tracking Technologies

loveph uses cookies and similar tracking technologies on the Platform to ensure proper functionality, enhance your user experience, and gather analytical data to improve our services. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits, and display preferences.
• Analytical cookies: Collect anonymised data about how players use the Platform, including pages visited, session duration, and navigation paths. This data is used to improve Platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorised login attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the loveph Platform, including account login and game access.

9. Data Retention

loveph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLA requirements.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, for compliance documentation purposes.
• Technical and access logs: Retained for twelve (12) months from the date of generation, unless required for longer retention in connection with an ongoing investigation or legal proceeding.

Upon expiry of the applicable retention period, loveph will securely delete or anonymise your personal data in accordance with our data disposal procedures. Anonymised data that can no longer be linked to an identifiable individual may be retained indefinitely for statistical and analytical purposes.

10. Data Security

loveph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the loveph Platform is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal data stored on loveph servers is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised loveph personnel on a strict need-to-know basis. All staff with access to personal data undergo data privacy training.
• Two-factor authentication: Available to all players and mandatory for loveph staff accessing internal systems containing personal data.
• Regular security assessments: loveph conducts periodic vulnerability assessments and penetration testing of its Platform infrastructure.
• Incident response: loveph maintains a documented data breach response procedure. In the event of a breach affecting your personal data, loveph will notify you and the NPC within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by loveph:

• Right to be informed: The right to be informed of how your personal data is being collected and processed — which this Policy fulfils.
• Right of access: The right to request a copy of the personal data loveph holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data loveph holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to loveph's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact loveph's Data Protection Officer using the contact details provided in Section 15. loveph will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may request proof of identity before processing your request.

12. Children's Privacy

loveph Casino is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming law. loveph does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, return any deposits, and delete the personal data in question.

If you are a parent or guardian and believe that a minor has registered an account with loveph, please contact us immediately using the details in Section 15 so that we can take prompt action.

13. Third-Party Links

The loveph Platform may contain links to third-party websites or services, including payment provider portals (such as GCash or Maya). loveph is not responsible for the privacy practices of any third-party website. We encourage you to review the privacy policies of any third-party service you access through or in connection with the loveph Platform.

This Policy applies solely to personal data collected and processed by loveph Casino in connection with the Platform. It does not apply to data collected by third-party payment processors, identity verification providers, or any other external service, each of which operates under its own privacy policy.

14. Updates to This Privacy Policy

loveph reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, loveph will notify registered players via email or in-platform notification at least 14 days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how loveph protects your personal data. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

If you have any concerns about changes to this Policy, please contact our Data Protection Officer before the effective date of the change. If you do not agree with the revised Policy, you may request account closure in accordance with the loveph Terms & Conditions.

15. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by loveph Casino, please contact our Data Protection Officer:

If you are not satisfied with loveph's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.