cashph Privacy Policy

1. Introduction

cashph ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our platform. We understand that Filipino players trust us with sensitive information — from identity documents to payment details — and we take that responsibility seriously.

This Privacy Policy describes how cashph collects, uses, stores, shares, and protects your personal data when you access or use the cashph website and related services (collectively, the "Platform"). It also explains the rights you have under Philippine data protection law and how you can exercise them.

This policy should be read alongside our Terms & Conditions, which govern your use of the cashph platform. Defined terms used but not defined in this policy have the meanings given to them in the Terms & Conditions.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, cashph acts as the personal information controller in respect of the personal data it collects from players and visitors to the Platform.

If you have any questions about how cashph handles your personal data, or if you wish to exercise any of your data subject rights, you may contact our Data Protection Officer at [email protected].

3. Personal Data We Collect

cashph collects the following categories of personal data from players and platform visitors:

cashph does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data (such as government ID numbers) is collected, it is handled with additional security controls.

4. How We Collect Your Data

cashph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session data via cookies and similar technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud partners; payment data from GCash, Maya, and Philippine banking partners.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or investigation requirements.

5. How We Use Your Personal Data

cashph uses the personal data we collect for the following purposes:

• To create, manage, and maintain your cashph account.
• To verify your identity and age (21+) in compliance with Philippine gaming regulations.
• To process deposits, withdrawals, and other financial transactions.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To provide customer support and respond to your enquiries and complaints.
• To send you account-related communications, including transaction confirmations, security alerts, and policy updates.
• To send you promotional offers and marketing communications, where you have consented to receive them.
• To monitor gaming activity for responsible gaming purposes and to enforce deposit limits, cooling-off periods, and self-exclusion requests.
• To comply with our legal and regulatory obligations under Philippine law, including reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC).
• To improve the cashph platform, analyse usage patterns, and develop new features.

6. Legal Basis for Processing

cashph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including KYC, AML, and PAGCOR reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

cashph does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and eligibility to use the Platform.
• Payment processors: GCash, Maya, and Philippine banking partners involved in processing your deposits and withdrawals. These providers receive only the data necessary to complete your transaction.
• Fraud prevention and security partners: Service providers that assist cashph in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Technology and hosting providers: Cloud infrastructure and software service providers that support the operation of the cashph platform, bound by confidentiality obligations.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law or court order.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers engaged by cashph are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with cashph's instructions and applicable Philippine law.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the cashph platform. They allow the Platform to recognise your device, maintain your session, and remember your preferences across visits. cashph also uses similar technologies such as web beacons and local storage for comparable purposes.

8.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your cashph account. These cannot be disabled without affecting core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how players use the cashph platform, helping us identify areas for improvement. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats to the Platform.

8.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the cashph platform, including your ability to stay logged in or access certain features. Strictly necessary cookies cannot be disabled while using the Platform.

9. Data Retention

cashph retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and Philippine AML regulations.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and related regulations.
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for ongoing dispute resolution.
• Technical and analytics data: Retained in anonymised or aggregated form for up to two (2) years for platform improvement purposes.

Where personal data is no longer required for any lawful purpose, cashph will securely delete or anonymise it in accordance with our data disposal procedures.

10. Data Security

cashph implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the cashph platform.
• Encryption of sensitive data at rest, including financial information and government ID data.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, cashph will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by cashph:

• Right to be informed: The right to know what personal data cashph collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data cashph holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by cashph. You can update basic account information directly through your account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time through your account settings or by contacting support.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe cashph has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with a clear description of your request. cashph will respond to all data subject requests within thirty (30) days of receipt. We may require you to verify your identity before processing your request.

Please note that certain rights are subject to limitations where processing is required for compliance with legal obligations, the performance of a contract, or the establishment, exercise, or defence of legal claims.

12. Minors and Age Restriction

The cashph platform is strictly intended for individuals who are at least 21 years of age. cashph does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the cashph registration and KYC process.

If cashph becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the cashph platform, please notify us immediately at [email protected].

Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gambling platforms. cashph supports PAGCOR's responsible gaming framework and takes its obligations regarding the protection of minors seriously.

13. Changes to This Privacy Policy

cashph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material, cashph will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of the cashph platform following the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how cashph protects your personal data.

14. Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way cashph handles your personal data, please contact our Data Protection Officer through the following channels:

If you are not satisfied with cashph's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012.