Privacy Policy

1. Introduction

loveph ("we," "us," or "our") operates the online casino and sports betting platform accessible at loveph.win (the "Platform"). We are committed to protecting the privacy and personal data of every Filipino player who interacts with the loveph Platform.

This Privacy Policy describes the types of personal information we collect from you when you access or use the loveph Platform, the purposes for which we use that information, with whom we share it, how long we retain it, and the rights you hold as a data subject under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA") and its implementing rules and regulations.

By creating a loveph Account or by continuing to use the Platform after this Privacy Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue your use of the Platform and may request closure of your Account.

This Privacy Policy forms part of, and should be read together with, the loveph Terms & Conditions and Responsible Gaming Policy.

2. Data Controller Identity

The data controller responsible for your personal information processed through the loveph Platform is the operating entity of loveph.win. As a platform directed at Philippine residents and operating within the PAGCOR regulatory framework, loveph is subject to Philippine data protection law.

loveph has designated a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act of 2012 and NPC Circular No. 16-01. The DPO may be contacted via the details provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Registration and Identity Data

When you create a loveph Account, we collect the following information:

• Full legal name as it appears on your Philippine government-issued identification;
• Date of birth (to verify the 21+ age requirement under PAGCOR regulations);
• Philippine mobile number (used as primary account identifier and for OTP authentication);
• Email address;
• Residential address (province, city/municipality, barangay);
• Government-issued ID type and number (for KYC verification — e.g., UMID, SSS, PhilHealth, driver's license, or passport).

3.2 Financial and Transaction Data

In connection with deposits, withdrawals, and gaming activity on loveph, we collect:

• GCash number or PayMaya account identifier linked to deposits;
• BPI, BDO, or Metrobank account details provided for withdrawal processing;
• Transaction amounts, dates, and reference numbers;
• Bonus claims and promotional activity records;
• Full gaming history, including games played, bet amounts, and outcomes.

3.3 Technical and Usage Data

When you access the loveph Platform, our servers automatically collect:

• IP address and approximate geolocation (province/city level);
• Device type, operating system, and browser information;
• Pages visited, features used, and session duration;
• Login timestamps and authentication event logs.

3.4 Communications Data

When you contact loveph's Filipino support team or participate in surveys or feedback requests, we retain records of those communications, including the content of your messages and our responses.

4. How We Collect Personal Data

loveph collects personal data through the following means:

• Directly from you — through Account registration forms, KYC document submissions, payment method linking, support communications, and voluntary participation in surveys or promotions;
• Automatically — through cookies, server logs, and analytics tools when you interact with the loveph Platform;
• From payment processors — GCash, PayMaya, and participating Philippine banks provide transaction confirmation data to loveph for payment reconciliation purposes;
• From identity verification providers — loveph may use third-party KYC service providers to assist in verifying government-issued identification documents.

5. Purpose and Legal Basis for Processing

loveph processes your personal data for the following specific purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account creation and management — necessary for the performance of the contract between you and loveph (DPA Section 12(b));
• Age and identity verification — compliance with PAGCOR regulations requiring verified player identity and the 21+ age restriction (DPA Section 12(c));
• Payment processing and fraud prevention — necessary for the performance of the contract and compliance with Philippine anti-money laundering laws (DPA Section 12(b) and (c));
• Customer support — legitimate interest in resolving player queries and maintaining service quality (DPA Section 12(f));
• Responsible gaming monitoring — compliance with PAGCOR responsible gaming obligations, including the detection of problem gambling indicators (DPA Section 12(c));
• Platform security and fraud detection — legitimate interest in protecting the Platform and its users from fraudulent activity (DPA Section 12(f));
• Marketing communications — with your consent, to send promotional offers, bonus notifications, and relevant gaming updates via SMS or email (DPA Section 12(a)). You may withdraw marketing consent at any time.

6. Data Sharing and Disclosure

loveph does not sell, rent, or trade your personal data to third parties. We disclose your personal information only in the following circumstances:

6.1 Service Providers

loveph engages third-party service providers who process personal data on our behalf under written data processing agreements that require them to protect your data to at least the same standard as loveph. These providers include: payment processors (GCash / PayMaya / Philippine bank partners), KYC verification services, cloud hosting providers, and customer support platform providers.

6.2 Regulatory and Legal Obligations

loveph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required by law, court order, or lawful regulatory directive.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of loveph's assets, player personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected players will be notified before any such transfer.

7. International Data Transfers

Where loveph uses service providers or cloud infrastructure located outside the Philippines, any transfer of personal data to those locations is conducted in compliance with NPC regulations on cross-border data transfers. loveph implements contractual data protection clauses and ensures that recipient parties maintain data protection standards consistent with the Philippine Data Privacy Act of 2012.

8. Data Retention

loveph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law:

• Active Account data: retained for the duration of the Account relationship;
• Transaction records: retained for a minimum of five (5) years following the transaction date, in compliance with AMLC record-keeping requirements;
• KYC documents: retained for a minimum of five (5) years from Account closure;
• Support communications: retained for two (2) years from the date of the communication;
• Marketing consent records: retained until withdrawn or for three (3) years from the date of last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

9. Security Measures

loveph implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and loveph servers;
• Encryption of sensitive data fields (including payment method identifiers and government ID numbers) at rest;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular penetration testing and security audits of the loveph Platform;
• Multi-factor authentication for internal systems accessing player data;
• Incident response procedures aligned with NPC Circular No. 16-03 on Personal Data Breach Management.

In the event of a personal data breach that poses a real risk of serious harm to affected players, loveph will notify the NPC and affected data subjects within 72 hours of becoming aware of the breach, in accordance with applicable NPC regulations.

10. Cookies and Tracking Technologies

loveph uses the following types of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management and security tokens. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how players use the loveph Platform, enabling us to identify and fix issues and improve user experience.
• Functional Cookies: Remember your preferences (such as language settings and game lobby display options) to provide a more personalised experience on subsequent visits.

Advertising or cross-site tracking cookies are not used by loveph. You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the loveph Platform.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by loveph:

• Right to be Informed: The right to know whether loveph processes personal data about you and, if so, what data is held and for what purposes — as set out in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data loveph holds about you, free of charge, once per calendar year.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. Certain data corrections may require supporting documentation.
• Right to Erasure: The right to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to loveph's legal retention obligations.
• Right to Data Portability: The right to receive a copy of certain personal data in a structured, commonly used, machine-readable format.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may unsubscribe from marketing communications at any time.
• Right to File a Complaint: The right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe loveph has violated your data protection rights.

To exercise any of the above rights, contact the loveph Data Protection Officer using the contact details in Section 14. loveph will respond to verified data subject requests within thirty (30) calendar days.

12. Children's Privacy

The loveph Platform is strictly intended for individuals aged 21 years and above. loveph does not knowingly collect, process, or store personal data from individuals under the age of 21. If loveph becomes aware that personal data has been collected from a person under 21, such data will be promptly deleted and the associated Account will be closed. If you believe a minor has created a loveph Account, please contact our support team immediately.

13. Changes to This Privacy Policy

loveph may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform features. Material changes will be communicated to registered players via email or a prominent notice on the loveph Platform at least seven (7) days before the updated Policy takes effect.

The "Last Updated" date at the top of this page always reflects the most recent revision. Players are encouraged to review this Privacy Policy periodically. Continued use of the loveph Platform following any amendment constitutes acceptance of the revised Policy.

14. Contact & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a data protection concern, please contact the loveph Data Protection Officer:

• Email: [email protected] (subject line: "Privacy / DPO Request")
• Support Hours: Daily, 8:00 AM to 12:00 Midnight (Philippine Time, PHT)

If you are not satisfied with loveph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on filing NPC complaints is available on the NPC's official government website.