plusph Privacy Policy

This Privacy Policy ("Policy") describes how plusph ("plusph," "we," "us," or "our") collects, uses, stores, shares, and otherwise processes personal data relating to registered account holders, visitors, and any other individuals who interact with the plusph platform accessible at plusph.cam and its associated services (collectively, the "Platform").

plusph is committed to protecting the privacy and personal data of all individuals whose information comes into our possession in the course of operating the Platform. This commitment is grounded in the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, together with all related issuances of the National Privacy Commission (NPC).

By creating a plusph account, accessing the Platform, or otherwise providing us with your personal data, you acknowledge that you have read this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the Platform or provide us with any personal data.

For the purposes of the Data Privacy Act of 2012, plusph acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. As PIC, plusph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection law.

plusph operates the Platform under a license granted by the Philippine Amusement and Gaming Corporation (PAGCOR). Certain data processing activities required by PAGCOR's regulatory framework — including player identity verification and transaction monitoring — are conducted under a legal obligation that exists independently of your consent.

plusph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and for handling data subject rights requests. Contact details for the DPO are set out in Section 15 of this Policy.

plusph collects the following categories of personal data in the course of operating the Platform:

plusph collects personal data through the following means:

• Direct collection: Information you provide when registering a plusph account, completing the KYC verification process, making deposits or withdrawals, contacting our support team, or updating your account settings.
• Automatic collection: Technical and usage data collected automatically through cookies, server logs, and similar technologies when you access or interact with the Platform. See Section 10 for details on cookies.
• Third-party payment providers: Transaction confirmation and reference data received from GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other payment service providers when you conduct financial transactions on the Platform.
• KYC and identity verification services: Where plusph uses a third-party identity verification provider to assist in confirming the accuracy of identity documents, that provider may share verification results (but not the underlying document) with plusph.
• Regulatory sources: Where required by PAGCOR or applicable anti-money laundering regulations, plusph may receive or cross-reference data from regulatory databases.

plusph processes your personal data for the following specific purposes:

• Account creation and management: Registering your plusph account, authenticating your identity at login, and managing your account throughout the duration of your membership.
• Identity verification (KYC): Verifying your identity and age (minimum 21 years) as required by PAGCOR regulations before processing withdrawals or when triggered by risk-based transaction monitoring.
• Payment processing: Facilitating deposits and withdrawals via your chosen payment method, reconciling transactions, and maintaining accurate financial records as required by law.
• Gaming services: Operating games, recording bet and game session history, applying wagering requirements to bonuses, and resolving game disputes.
• Responsible gaming compliance: Implementing deposit limits, session reminders, cooling-off periods, and self-exclusion measures requested by you, and monitoring for indicators of problem gambling behaviour as required by PAGCOR's responsible gaming framework.
• Anti-money laundering (AML) and fraud prevention: Conducting transaction monitoring, suspicious activity reporting, and fraud detection as required under the Anti-Money Laundering Act (RA 9160 as amended) and related PAGCOR compliance obligations.
• Customer support: Responding to your enquiries, resolving account issues, and processing complaints.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, stability, and features of the plusph platform.
• Legal and regulatory compliance: Meeting plusph's obligations under RA 10173, PAGCOR regulations, AMLA, and any other applicable Philippine law.
• Communications: Sending you transactional messages (deposit confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about plusph offers and events.

Under the Data Privacy Act of 2012, plusph processes your personal data on the following legal bases:

• Contract performance: Processing necessary to perform our obligations under the Terms & Conditions you agreed to when creating your plusph account — including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, NPC directives, and other applicable Philippine legal obligations — including KYC verification, transaction monitoring, and record retention.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics where our interests do not override your fundamental privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where your explicit, freely given consent has been obtained. You may withdraw consent for marketing at any time by contacting our support team or updating your account notification preferences.

plusph does not sell, rent, or trade your personal data to third-party marketers or data brokers. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment service providers: GCash, Maya, BPI, BDO, Metrobank, InstaPay, GrabPay, and other payment processors receive the transaction data necessary to process your deposits and withdrawals.
• Game software providers: Game suppliers receive session and wagering data necessary to operate their games and resolve disputes. Game providers operate under contractual obligations that restrict their use of this data.
• Identity verification providers: Third-party KYC service providers receive identity document data for the sole purpose of performing verification on plusph's behalf.
• PAGCOR and regulatory authorities: plusph is required to submit player activity reports, suspicious transaction reports, and other records to PAGCOR and relevant government agencies as mandated by law. This sharing occurs without prior notice to you where required by law.
• Law enforcement and courts: Where legally required by valid court order, warrant, or lawful government directive.
• Professional advisors: Legal, audit, and compliance professionals retained by plusph, bound by professional confidentiality obligations.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of plusph's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom plusph shares personal data are required to process that data only for the specified purpose, maintain appropriate security measures, and comply with applicable Philippine data protection law.

Some of plusph's third-party service providers — including game software providers and cloud infrastructure providers — may operate servers or process data in jurisdictions outside the Republic of the Philippines. Where personal data is transferred internationally, plusph ensures that adequate safeguards are in place in compliance with NPC requirements, including:

• Contractual data processing agreements incorporating data protection obligations consistent with RA 10173.
• Transfers only to jurisdictions or recipients that provide a level of data protection substantially equivalent to that afforded under Philippine law.
• Where required, registration of cross-border data flows with the National Privacy Commission.

plusph retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account and identity data: For the duration of your plusph account plus a minimum of five (5) years following account closure, as required by PAGCOR regulations and AMLA record-keeping obligations.
• Financial transaction records: A minimum of five (5) years from the date of each transaction, in compliance with AMLA and PAGCOR requirements.
• Gaming session and bet history: Three (3) years from the date of each session, unless a longer period is required by regulatory directive.
• KYC documents: For the duration of your account plus five (5) years following closure, consistent with PAGCOR and AMLA requirements.
• Support communications: Two (2) years from the date of the interaction, or longer if the matter is the subject of an ongoing dispute or regulatory review.
• Technical and log data: Up to twelve (12) months from collection, after which log data is anonymised or deleted.

Where plusph is subject to a legal hold, regulatory investigation, or pending litigation, affected data will be retained beyond the standard periods until the relevant matter is resolved.

The plusph platform uses cookies and similar technologies to operate the Platform, remember your preferences, maintain your login session, and collect aggregated usage analytics. Cookies are small text files stored on your device by your browser at the request of our servers.

plusph uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function correctly, including maintaining your authenticated session and security tokens. These cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your preferences such as language settings and responsible gaming configurations. Disabling these may affect Platform usability.
• Analytics cookies: Collect aggregated, anonymised information about how visitors use the Platform — such as pages visited and session duration — to help us improve performance. No personally identifiable information is collected through analytics cookies.
• Session security cookies: Support fraud detection, bot prevention, and account security functions. These are strictly necessary for security purposes.

You can control cookies through your browser settings. Note that disabling strictly necessary or security cookies may prevent you from logging in to your plusph account or using certain Platform features. For mobile users accessing plusph through a mobile browser in the Philippines, standard mobile browser cookie controls apply.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by plusph. To exercise any of these rights, contact our Data Protection Officer as described in Section 15:

• Right to be informed: The right to be informed that your personal data is being or has been collected and processed, and for what purpose — which this Policy satisfies.
• Right of access: The right to obtain confirmation of whether plusph holds personal data about you and to receive a copy of that data, along with information about how it is processed.
• Right to correction (rectification): The right to have inaccurate or incomplete personal data corrected or completed. You may update basic account information directly through your plusph account settings.
• Right to erasure (right to be forgotten): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal obligations that require retention (such as AMLA and PAGCOR requirements).
• Right to object: The right to object to the processing of your personal data on grounds of legitimate interests, and to object at any time to processing for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where processing is based on consent or contract.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that plusph has violated your rights under RA 10173.

plusph implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and plusph servers.
• Encryption of sensitive data at rest using industry-standard algorithms.
• Role-based access controls limiting internal access to personal data to those with a legitimate operational need.
• Two-factor authentication availability for all plusph accounts, protecting against unauthorised login.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Formal incident response procedures for detecting, assessing, and responding to personal data breaches.

Despite these measures, no internet-based system can guarantee absolute security. You are responsible for maintaining the confidentiality of your plusph account credentials and for notifying us immediately if you suspect unauthorised access to your account.

The plusph platform is strictly for individuals aged 21 years and above, in compliance with PAGCOR's regulations governing casino-style online gaming in the Philippines. plusph does not knowingly collect personal data from individuals below the age of 21.

Where plusph discovers that an account has been created by or on behalf of an individual below 21 years of age, that account will be immediately suspended, all gaming activity voided, and any deposits returned (net of applicable processing costs) to the original payment source following identity verification of the account holder. The personal data of the underage individual will be deleted in accordance with our data retention obligations and applicable law.

plusph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The updated Policy will be published on this page with a revised effective date.

Where changes are material — for example, a change to the categories of personal data collected, the purposes for which it is used, or the third parties with whom it is shared — plusph will notify registered account holders via the email address or mobile number associated with their account, or by a prominent notice on the Platform, at least fourteen (14) days before the changes take effect.

Your continued use of the plusph platform after the effective date of any updated Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure.

If you have any questions about this Privacy Policy, wish to exercise your rights as a data subject, or need to report a privacy concern, please contact plusph's Data Protection Officer (DPO).

The DPO is responsible for ensuring plusph's compliance with RA 10173 and for handling data subject rights requests in a timely and transparent manner. All data subject requests are handled confidentially and processed within thirty (30) days of receipt of a complete and verifiable request.

You may reach the plusph Data Protection Officer via our 24/7 live chat support channel (select "Data Privacy" from the support menu) or by email — the support email address is displayed in the footer of this page. Please include "DPO Request" in the subject line of your email, along with a clear description of your request and the identity information necessary for us to locate your account and verify your identity before processing the request.

This Privacy Policy was last reviewed and published on 1 January 2026 and is effective from that date.