Privacy Policy

This Privacy Policy ("Policy") describes how pgplus ("pgplus", "we", "us", "our"), the operator of the online gaming platform at pgplus.cam ("Platform"), collects, uses, stores, discloses, and otherwise processes the personal data of individuals who access or use the Platform, including registered players, prospective players, and visitors to the pgplus.cam website ("you", "your", "Data Subject").

This Policy applies to all personal data collected through: the pgplus website at pgplus.cam; the pgplus account registration and verification process; deposits, wagers, withdrawals, and all other financial transactions conducted through the Platform; customer support interactions via live chat, email, or any other communication channel operated by pgplus; promotional and marketing communications; and any other interaction between you and pgplus in connection with the Platform.

By registering an account on the pgplus Platform, completing any transaction, or continuing to use the Platform following notification of this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. Where consent is the legal basis for processing, you may withdraw your consent at any time, subject to the conditions described in Section 10.

This Policy should be read together with pgplus's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

pgplus collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect are set out below.

2.1 Account and Identity Data

When you register an account or undergo identity verification, pgplus collects:

• Full legal name as it appears on your government-issued identification;
• Date of birth and age verification documentation;
• Philippine residential address, including province, city, and postal code;
• Valid email address;
• Philippine mobile number;
• Government-issued identification number and copies of identification documents (e.g., PhilSys National ID, passport, driver's license, UMID, SSS ID, PRC ID);
• Selfie or live photograph submitted for identity verification purposes;
• Username and account credentials (passwords are stored only in irreversibly hashed form — pgplus never stores or views plaintext passwords).

2.2 Financial and Transaction Data

In connection with deposits, withdrawals, and wagers placed on the Platform, pgplus collects:

• GCash account number and transaction reference numbers;
• PayMaya account details and transaction identifiers;
• Philippine bank account details provided for withdrawal purposes (BPI, BDO, Metrobank, and other Philippine banks);
• Complete transaction history including amounts, timestamps, game identifiers, and outcome records;
• Source of funds documentation where required by anti-money laundering regulations.

2.3 Technical and Usage Data

When you access and use the pgplus Platform, we automatically collect certain technical information, including:

2.4 Communications Data

When you contact pgplus customer support, respond to surveys, or communicate with us through any channel, we collect and retain records of those communications, including the content of messages, timestamps, and the identity of the support agent involved.

pgplus collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide voluntarily during account registration, KYC verification, deposits and withdrawals, promotional claim forms, survey responses, and customer support interactions;
• Automatically from your device: Technical and usage data collected automatically when you access the pgplus Platform, including through cookies, web beacons, and server logs, as described in Section 7;
• From payment service providers: Transaction confirmation data shared by GCash, PayMaya, Philippine banks, and other payment processing partners when you conduct financial transactions with pgplus;
• From identity verification providers: Data returned by third-party identity verification services engaged by pgplus to validate the authenticity of documents submitted during KYC;
• From fraud prevention and anti-money laundering services: Risk assessment data from specialist service providers engaged to protect the Platform and its players from fraud, money laundering, and related financial crimes.

pgplus processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012 and applicable implementing regulations. The legal bases we rely upon are:

• Contract performance: Processing is necessary to establish and fulfill our contractual obligations to you as set out in our Terms & Conditions — including account management, game provision, payment processing, bonus administration, and customer support;
• Legal compliance: Processing is required for pgplus to comply with applicable Philippine laws and regulations, including anti-money laundering laws, age verification requirements, reporting obligations, and orders of competent authorities;
• Legitimate interests: Processing is necessary for pgplus's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, platform security, responsible gaming monitoring, and product improvement — provided those interests are not overridden by your rights and interests;
• Consent: For processing that is not strictly necessary for contract performance, legal compliance, or legitimate interests — particularly direct marketing communications — pgplus will seek your express consent and will honor any withdrawal of that consent promptly.

pgplus uses the personal data it collects for the following purposes:

5.1 Account and Service Provision

• Creating, verifying, and maintaining your pgplus account;
• Verifying your age and identity in compliance with Philippine gaming regulations (21+ requirement strictly enforced);
• Processing deposits, wagers, and withdrawal requests;
• Administering bonus credits, wagering requirements, and promotional entitlements;
• Providing customer support and resolving account disputes.

5.2 Legal and Regulatory Compliance

• Fulfilling obligations under the Anti-Money Laundering Act (AMLA) of the Philippines and related regulations, including suspicious transaction reporting to the Anti-Money Laundering Council (AMLC);
• Responding to lawful requests, orders, and directions from Philippine courts, regulatory bodies, and law enforcement authorities;
• Maintaining records required by applicable law for specified retention periods.

5.3 Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent activity, collusion, system exploitation, money laundering, and other prohibited activities on the Platform;
• Protecting the integrity of games and ensuring fair play for all pgplus players;
• Monitoring for unauthorized account access and responding to security incidents.

5.4 Responsible Gaming

• Monitoring wagering patterns for indicators of problem gambling behavior, in accordance with our Responsible Gaming obligations;
• Administering player-requested responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods;
• Communicating with players who may benefit from responsible gaming support resources.

5.5 Platform Improvement and Personalization

• Analyzing aggregated and anonymized usage data to improve Platform performance, game selection, and the Filipino player experience;
• Personalizing the game lobby and promotional offers to reflect your preferences, subject to your consent where required;
• Conducting internal research and analytics to support product development decisions.

5.6 Marketing Communications

With your consent, pgplus may send you promotional communications by email or SMS regarding new games, bonuses, and other pgplus offers. You may withdraw your consent to marketing communications at any time by using the unsubscribe mechanism in any such communication or by contacting pgplus support.

pgplus does not sell your personal data to third parties. We do not share your personal data with any party except as described in this section.

6.1 Service Providers and Data Processors

pgplus engages carefully selected third-party service providers who process personal data on our behalf solely for the purposes we direct, under binding data processing agreements that require them to maintain appropriate technical and organizational security measures. These categories include:

• Payment processing partners: GCash, PayMaya, BPI, BDO, Metrobank, and other Philippine payment service providers — to facilitate deposits and withdrawals;
• Identity verification providers: Specialist KYC/AML service providers engaged to verify identity documents and assess player risk profiles;
• Cloud infrastructure providers: Hosting and content delivery network providers used to operate the pgplus Platform infrastructure;
• Customer support platforms: Technology providers used to operate the live chat and email support systems;
• Analytics providers: Aggregated and anonymized usage analytics platforms used for Platform improvement (no personally identifiable data shared).

6.2 Legal and Regulatory Disclosure

pgplus may disclose your personal data to competent Philippine authorities, courts, and regulatory bodies where required by law or court order, including but not limited to: the Anti-Money Laundering Council (AMLC); the National Privacy Commission (NPC); law enforcement agencies in connection with criminal investigations; and courts of competent jurisdiction pursuant to valid legal process.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial part of pgplus's business assets, your personal data may be transferred to the successor entity as part of that transaction, subject to the successor maintaining equivalent privacy protections. pgplus will notify affected players of any such transfer prior to your personal data becoming subject to a different privacy policy.

The pgplus Platform uses cookies and similar tracking technologies to provide core Platform functionality, maintain session security, and collect usage analytics. A cookie is a small text file placed on your device by the pgplus Platform when you access it.

7.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the operation of the pgplus Platform — including session authentication, login state management, security token validation, and fraud detection. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: Allow the Platform to remember your preferences such as language settings, last-visited game categories, and accessibility configurations, to provide a more personalized experience.
• Analytics cookies: Collect aggregated and anonymized information about how Filipino players use the pgplus Platform — pages visited, session duration, error events — to help us improve the Platform. No individually identifiable data is used for analytics purposes.
• Security cookies: Used to detect fraudulent login attempts, suspicious session activity, and other security threats, protecting your account and the integrity of the Platform.

pgplus does not use advertising or third-party tracking cookies that follow your activity across other websites or share browsing data with advertising networks. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing the pgplus Platform.

pgplus retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable Philippine law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your pgplus account and for a period of five (5) years following account closure, in accordance with AMLA record-keeping requirements;
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, or longer where required by AMLC regulations or ongoing investigation;
• KYC and verification documents: Retained for the duration of your account and five (5) years following closure, or as directed by applicable regulatory requirements;
• Customer support records: Retained for three (3) years from the date of the most recent interaction, to support dispute resolution and quality assurance;
• Technical and usage logs: Retained for a maximum of thirteen (13) months, after which they are deleted or irreversibly anonymized;
• Marketing consent records: Retained for the duration of your marketing opt-in status and one (1) year following withdrawal of consent, for consent audit purposes.

Where personal data has been anonymized such that you cannot reasonably be identified from it, pgplus may retain and use that anonymized data indefinitely for analytical and statistical purposes without further notice.

pgplus implements and maintains appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• Transport layer security: All data transmitted between your device and the pgplus Platform is encrypted using 256-bit TLS (Transport Layer Security) encryption, ensuring that your personal and financial data cannot be intercepted in transit;
• Password hashing: Account passwords are stored exclusively in irreversibly hashed form using industry-standard cryptographic algorithms — pgplus cannot retrieve your plaintext password and will never ask for it;
• Two-factor authentication: Optional SMS-based two-factor authentication is available to all pgplus players and strongly recommended, providing an additional layer of account access protection beyond the username and password;
• Access controls: Strict role-based access controls limit internal pgplus personnel access to personal data on a need-to-know basis. Access to sensitive data is logged and audited;
• Penetration testing and security audits: The pgplus Platform undergoes regular independent security testing and vulnerability assessments;
• Data breach response: pgplus maintains a documented data breach response plan. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pgplus will notify the National Privacy Commission (NPC) and affected players within the timeframes required by the Data Privacy Act.

As a Data Subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by pgplus. These rights may be exercised by contacting pgplus at [email protected] with the subject line "Data Privacy Rights Request."

pgplus will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, pgplus may extend this period by a further thirty (30) days, with notification to you. Some rights are subject to limitations under applicable law — for example, the right to erasure does not override pgplus's obligations to retain records under AMLA and other Philippine regulatory requirements.

pgplus implements mandatory age verification as part of the account registration process and through the KYC verification procedure. Any account found to belong to a player under 21 years of age will be immediately closed, all funds will be returned to the payment source, and all personal data will be deleted to the extent permitted by law and regulatory requirements.

If pgplus becomes aware that personal data has been collected from an individual under 21 without valid parental or guardian consent, pgplus will take immediate steps to delete that data from its systems. Parents or guardians who believe their child under 21 has created a pgplus account should contact pgplus support immediately at [email protected].

As an online gaming platform, pgplus may engage service providers whose technical infrastructure is located outside the Philippines. In such cases, your personal data may be transferred to and processed in jurisdictions other than the Philippines. pgplus takes the following measures to ensure that any cross-border transfer of personal data is conducted lawfully and with appropriate protections:

• pgplus transfers personal data outside the Philippines only to countries or organizations that have been deemed to provide an adequate level of data protection, or under binding contractual safeguards that impose equivalent obligations on the recipient;
• All third-party service providers engaged by pgplus who receive personal data are required, by contract, to process that data only for the purposes pgplus specifies and to maintain security standards equivalent to those described in this Policy;
• pgplus does not transfer your personal data to jurisdictions that lack adequate legal frameworks for personal data protection without first implementing appropriate contractual or technical safeguards;
• Where applicable, pgplus complies with any notification or approval requirements of the National Privacy Commission in relation to cross-border data transfers.

pgplus reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the structure of the pgplus Platform. All changes will be posted on this page at pgplus.cam/privacy-policy with an updated "Last Updated" date.

Where a proposed change materially affects your privacy rights or the way in which pgplus processes your personal data, pgplus will provide at least seven (7) days' advance notice via email to your registered address, or by prominent notice on the Platform, before the change takes effect. Your continued use of the pgplus Platform after the effective date of any amendment to this Policy constitutes your acceptance of the revised Policy.

pgplus recommends that you review this Privacy Policy periodically to stay informed of how your personal data is being protected and processed. The current version of the Policy is always accessible at pgplus.cam/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way pgplus processes your personal data, you may contact us through any of the following channels:

• Privacy and Data Rights Inquiries: [email protected] — use the subject line "Data Privacy Rights Request" for formal requests under Section 10
• General Support and Queries: Live chat available 24/7 through the pgplus.cam Platform interface
• Response Commitment: pgplus will acknowledge all privacy-related inquiries within 24 hours and provide a substantive response within 30 calendar days

National Privacy Commission

If you are not satisfied with pgplus's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC), the Philippine government body responsible for administering and enforcing the Data Privacy Act of 2012. Information about the NPC's complaint process is available on the NPC's official website. pgplus cooperates fully with NPC investigations and inquiries.