weakph Privacy Policy

1 Who We Are — The Data Controller

1.1 weakph (referred to as "weakph," "we," "us," or "our" in this Policy) is the data controller responsible for the personal data of players who use the weakph Platform at weakph.vip.

1.2 weakph operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and the regulations issued by the National Privacy Commission ("NPC").

1.3 Questions regarding this Policy or your personal data may be directed to the weakph Data Protection Officer at the contact details provided in Section 15.

2 Personal Data We Collect

weakph collects the following categories of personal data:

2.1 Identity and Contact Data

• Full legal name, date of birth, nationality;
• Philippine mobile number and email address;
• Government-issued identity document number and type (collected during KYC verification);
• Residential address within the Philippines.

2.2 Account and Authentication Data

• Username, encrypted password, and security question responses;
• Two-factor authentication registration details;
• Login timestamps and session identifiers.

2.3 Financial Data

• GCash, Maya, or bank account identifiers used for deposits and withdrawals (we do not store full payment card numbers);
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references;
• Account balance records.

2.4 Gaming Activity Data

• Game session records, wager amounts, game outcomes, and bonus utilisation;
• Responsible gaming tool settings, including deposit limits and self-exclusion status;
• VIP tier status and programme participation history.

2.5 Technical and Device Data

• IP address, device type, operating system, and browser type;
• Approximate geolocation (country and city level, derived from IP address);
• Cookie identifiers and session tokens — see Section 7.

2.6 Communications Data

• Customer support chat and email correspondence;
• Records of marketing communication preferences and unsubscribe actions.

3 How We Collect Your Data

3.1 Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account profile on the weakph Platform.

3.2 Automatically — through cookies, web beacons, and server logs as you navigate and interact with the Platform. See Section 7 for details.

3.3 From third parties — identity verification services and fraud-detection providers used during KYC; payment processors confirming transaction completion; PAGCOR's self-exclusion registry.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, weakph processes your personal data on the following lawful bases:

• Contractual necessity — processing required to register your Account, operate gameplay, process deposits and withdrawals, and deliver the services you requested;
• Legal obligation — processing required to comply with PAGCOR licensing conditions, anti-money-laundering laws, and NPC regulations;
• Legitimate interests — processing for fraud detection, platform security, and service improvement, where those interests do not override your privacy rights;
• Consent — processing for direct marketing communications, where we have obtained your prior agreement and you may withdraw consent at any time.

5 How We Use Your Personal Data

weakph uses the personal data described in Section 2 for the following purposes:

• Registering and maintaining your weakph Account;
• Verifying your identity and age (21+) as required by PAGCOR;
• Processing deposits and withdrawals via GCash, Maya, BPI, BDO, and other supported methods;
• Delivering live casino, slot, bingo, fishing, and sports betting services;
• Administering bonuses, promotions, and the VIP programme;
• Detecting and preventing fraud, money laundering, and prohibited conduct under our Terms & Conditions;
• Enforcing responsible gaming obligations, including processing self-exclusion and deposit limit requests;
• Responding to your customer support enquiries;
• Sending promotional communications where you have consented to receive them;
• Complying with PAGCOR reporting obligations and other applicable Philippine law;
• Improving Platform performance, game offerings, and user experience through anonymised and aggregated analytics.

6 Sharing Your Personal Data

6.1 weakph does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary for each purpose:

• Payment processors (GCash, Maya, BPI, BDO, UnionBank, 7-Eleven, Coins.ph) — to process your deposit and withdrawal transactions;
• Game content providers — live dealer studios and RNG game developers receive anonymised session identifiers to deliver gameplay; they do not receive your full identity data;
• Identity verification services — third-party KYC and document verification providers used to confirm your identity and age during the verification process;
• PAGCOR — as required by our operating license, including player dispute reporting and self-exclusion registry participation;
• Law enforcement and regulatory authorities — where weakph is legally required to disclose data in response to lawful requests under Philippine law;
• Fraud prevention and anti-money-laundering services — shared in aggregated or pseudonymised form to the extent required for platform security.

6.2 All third-party service providers who access your personal data on weakph's behalf are contractually obligated to process that data only as instructed by weakph, to maintain appropriate security measures, and to comply with applicable Philippine data protection law.

7 Cookies and Tracking Technologies

7.1 The weakph Platform uses cookies — small text files stored on your device — and related technologies (web beacons, local storage) to operate and improve the Platform.

7.2 The following categories of cookies are used:

• Strictly necessary cookies — required for Platform functionality including session management, login state, and security. These cannot be disabled without impairing your use of the Platform.
• Performance cookies — collect anonymised data about how players interact with the Platform, used to identify and fix technical issues and improve page load performance.
• Functional cookies — remember your preferences such as language settings, responsible gaming tool configurations, and game lobby display options.
• Analytics cookies — aggregate usage data to help weakph understand which games, promotions, and features are most valued by Filipino players. Data is analysed in anonymised form only.

7.3 You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality. weakph does not use third-party advertising or tracking cookies for cross-site profiling.

8 Data Retention

8.1 weakph retains your personal data for as long as your Account is active and for a period thereafter as required by applicable law and our legitimate business purposes.

8.2 Specifically:

• Account and identity data are retained for a minimum of five (5) years following account closure, as required by PAGCOR's anti-money-laundering obligations;
• Financial transaction records are retained for five (5) years from the date of each transaction in compliance with the Anti-Money Laundering Act;
• Customer support communications are retained for two (2) years from the date of resolution;
• Marketing preference records (including opt-outs) are retained indefinitely to ensure we honour your choices.

8.3 After the applicable retention period, personal data is securely deleted or anonymised in accordance with weakph's data disposal procedures.

9 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by weakph:

• Right to be informed — the right to know what personal data weakph holds about you and how it is processed;
• Right of access — the right to obtain a copy of your personal data upon request;
• Right to rectification — the right to have inaccurate or incomplete personal data corrected;
• Right to erasure — the right to request deletion of personal data that is no longer necessary, subject to our legal retention obligations;
• Right to object — the right to object to processing based on legitimate interests, including direct marketing;
• Right to data portability — the right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission if you believe your data rights have been violated.

To exercise any of these rights, contact the weakph Data Protection Officer as described in Section 15. weakph will respond to verified data subject requests within fifteen (15) business days of receipt.

10 Children's Privacy and the 21+ Requirement

10.1 The weakph Platform is strictly for individuals who are 21 years of age or older. weakph does not knowingly collect personal data from persons under the age of 21.

10.2 If weakph determines — at any point during the account lifecycle — that a registered Account holder is under the age of 21, the Account will be immediately closed, all pending transactions cancelled, and any deposited funds returned. Related personal data will be deleted except to the extent retention is required for legal compliance purposes.

10.3 If you are a parent or guardian and believe that a minor has registered on the weakph Platform, please contact the support team immediately.

11 Security Measures

11.1 weakph implements a layered approach to data security, including:

• 256-bit TLS/SSL encryption for all data in transit;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Role-based internal access controls limiting staff data access to what is necessary for their function;
• Continuous security monitoring and intrusion detection systems;
• Regular security assessments and penetration testing;
• Two-factor authentication availability for all player Accounts.

11.2 In the event of a personal data breach that is likely to result in risk to your rights, weakph will notify affected players and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.

12 International Data Transfers

12.1 Certain weakph service providers — including game content providers and cloud infrastructure operators — may be located outside the Philippines. Where personal data is transferred outside the Philippines, weakph takes appropriate contractual and technical measures to ensure that the data receives a level of protection consistent with the Data Privacy Act.

12.2 Such transfers are limited to what is strictly necessary to deliver the services you have requested and are subject to data processing agreements that impose obligations equivalent to those under Philippine law.

13 Third-Party Links

13.1 The weakph Platform does not contain links to third-party websites in its primary content areas. Where references to third-party services (such as payment providers) are made for informational purposes, weakph is not responsible for the privacy practices of those third parties.

13.2 If you access third-party services as part of a payment transaction initiated through the weakph Platform, the privacy policy of that third-party service governs the personal data you submit directly to that service.

14 Amendments to This Policy

14.1 weakph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services.

14.2 Material changes will be communicated to registered players by email to their registered address and/or by prominent notice on the Platform at least seven (7) days before the revised Policy takes effect. The "Last Updated" date at the top of this page will reflect the most recent revision.

14.3 Continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgment of the revised terms. If you do not accept the revised Policy, you may request account closure as described in the weakph Terms & Conditions.

15 Contact Us and Data Protection Officer

15.1 For any questions, concerns, or data subject rights requests relating to this Privacy Policy or weakph's data practices, please contact:

15.2 If you are not satisfied with weakph's response to a data privacy concern, you have the right to file a complaint with the Philippine National Privacy Commission (NPC).