Playtok Privacy Policy – Philippines

This Privacy Policy forms part of the overall terms governing your use of Playtok. It should be read together with the Playtok Terms and Conditions and Responsible Gaming Policy. By registering an account or using any part of the Playtok platform, you confirm that you have read and understood this policy and consent to the collection and processing of your personal data as described herein.

Playtok is committed to processing personal data lawfully, fairly, and transparently — in full compliance with the Republic Act 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

If you have any concerns or questions about this policy at any time, our dedicated Data Privacy Officer is available to assist you. Contact details are set out in Section 14 of this document.

Playtok is an online gaming platform operating at playtok.click, designed and maintained for Filipino players. For the purposes of the Data Privacy Act of 2012, Playtok acts as the Personal Information Controller in respect of the personal data it collects directly from you during registration, account use, and payment processing.

Where Playtok engages third-party service providers — such as payment processors, game content providers, identity verification services, and infrastructure partners — those parties act as Personal Information Processors under binding data processing agreements that require them to handle your data only in accordance with Playtok's instructions and this policy.

The Playtok Data Privacy Officer can be reached at support@playtok.click with the subject line "Data Privacy Inquiry".

Playtok collects personal data only to the extent necessary to provide the platform's services, comply with legal obligations, and protect the safety and security of all players. The categories of personal data we collect include:

Playtok collects personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your account details.
• Automatically — through cookies, web analytics tools, and server logs when you browse or interact with any part of the Playtok platform. This includes your IP address, device identifiers, session data, and page interactions.
• From third parties — from payment processors (GCash, Maya, banks) who confirm the status and ownership of transactions; from identity verification service providers who validate government ID authenticity; and from fraud prevention and AML screening services where required by law.

When data is collected from third-party sources, Playtok ensures that those third parties have the lawful authority to share the data with us and that the sharing is limited to what is necessary for the purposes described in this policy.

Playtok uses your personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the reason it was originally collected. The main purposes for which we use your data are:

• Account management: Creating and maintaining your Playtok account, verifying your identity and age, processing logins, and keeping your account settings up to date.
• Payment processing: Processing deposits and withdrawals via GCash, Maya, bank transfer, and card — including verifying that payment accounts are held in your name as required under anti-money laundering rules.
• Legal and regulatory compliance: Meeting our obligations under Philippine gaming regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and applicable PAGCOR licensing requirements.
• Fraud and security prevention: Detecting and investigating suspicious activity, preventing unauthorised account access, and identifying potential money laundering or collusion.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with Playtok and to improve the platform's design, performance, and game selection.
• Customer support: Responding to your queries, resolving payment disputes, and addressing account issues efficiently.
• Responsible gaming: Monitoring account activity to identify signs of problem gambling behaviour and facilitating the use of responsible gaming tools you request.
• Marketing communications: Sending you promotional offers, bonuses, and news about Playtok — but only where you have given your explicit consent. You can withdraw marketing consent at any time from your account settings or by emailing our support team.

Under the Philippine Data Privacy Act of 2012, Playtok relies on the following legal bases for processing personal data:

• Consent: Where you have given clear and specific consent — for example, when you agree to receive marketing communications, or when you consent to this Privacy Policy during registration.
• Contract: Where processing is necessary to perform our agreement with you — including account creation, game provision, and payment processing.
• Legal obligation: Where processing is required to comply with Philippine law — including AMLA compliance, age verification obligations, and data retention requirements under gaming regulations.
• Legitimate interests: Where Playtok has a legitimate business interest in processing your data — such as fraud prevention, platform security, and abuse detection — provided those interests are not overridden by your rights and freedoms.

Where Playtok relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing that took place prior to the withdrawal.

Playtok does not sell your personal data to any third party — ever. We share your data only in the following limited and necessary circumstances:

• Payment processors: GCash, Maya (Voyager Innovations), GrabPay, Coins.ph, InstaPay-connected banks (BDO, BPI, UnionBank), and Visa/Mastercard acquiring banks receive only the data required to process your specific transaction.
• Identity verification providers: Third-party KYC services that validate government-issued ID documents and perform age and identity checks. These providers operate under strict data processing agreements with Playtok.
• Game content providers: JILI and other game suppliers may receive anonymised session identifiers necessary to deliver game functionality. They do not receive your name, contact information, or financial data.
• Regulatory and law enforcement authorities: Where required by Philippine law — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or a court of competent jurisdiction — Playtok will disclose data as legally required.
• Infrastructure and technology providers: Cloud hosting, analytics, and security service providers who assist in operating the Playtok platform. All such providers are bound by data processing agreements that restrict their use of your data to the services they provide to Playtok.

All third parties with whom Playtok shares personal data are contractually required to process that data securely, lawfully, and solely for the specified purposes.

All personal data collected by Playtok is stored on secure servers protected by industry-standard security measures. The key security protections in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and Playtok servers.
• Encryption at rest for all sensitive data stored in Playtok databases, including identity documents, financial account references, and passwords (which are stored as one-way cryptographic hashes — never in plaintext).
• Access controls — only authorised Playtok personnel who require access to your data for their specific role are permitted to view it. Access is logged and audited.
• PCI-DSS Level 1 compliant card payment processing — card data never passes through or is stored on Playtok servers.
• Regular security assessments including vulnerability scans and penetration testing conducted by independent security professionals.

In the event of a personal data breach that is likely to affect your rights and freedoms, Playtok will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the Data Privacy Act of 2012 and NPC Circular 16-03.

Playtok uses cookies and similar tracking technologies to make the platform function correctly, to understand how players use the site, and to improve the overall experience. A cookie is a small text file placed on your device when you visit a website. It does not give us access to your device or any data stored on it beyond what is described below.

The cookies used at Playtok fall into the following categories:

You can control cookies through your browser settings. Note that disabling strictly necessary cookies will prevent the Playtok platform from functioning correctly and you will be unable to log in or play games.

Playtok retains your personal data only for as long as is necessary for the purposes set out in this policy, or as required by applicable Philippine law. Retention periods by data category are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of 5 years after account closure, as required by PAGCOR licensing obligations and AMLA record-keeping requirements.
• Transaction and financial data: Retained for a minimum of 5 years from the date of each transaction, in line with Philippine AMLA requirements.
• KYC verification documents: Retained for 5 years from the date of verification, or longer if required by a specific regulatory directive.
• Support communications: Retained for 2 years from the date of the last communication, or longer if related to an unresolved dispute or legal matter.
• Technical and session data (cookies, logs): Aggregated analytics data is retained for up to 24 months. Raw server logs are retained for 90 days.
• Marketing preferences: Retained until you withdraw consent, at which point marketing communications will cease within 48 hours.

When the retention period for your data expires, Playtok will securely delete or anonymise the data so that it can no longer be linked to you as an individual.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by Playtok. These rights can be exercised at any time by contacting our Data Privacy Officer:

Playtok is strictly an adult platform. We do not knowingly collect personal data from individuals below the age of 21 years. Age verification is conducted during registration and again before first withdrawal, using government-issued identification documents.

If Playtok discovers or has reason to believe that personal data has been collected from a person under 21 years of age, the account will be suspended immediately, all collected data will be deleted without unnecessary delay, and any deposits will be returned to the originating payment method to the extent practicable.

If you are a parent or guardian and believe that your child has created a Playtok account, please contact us immediately at support@playtok.click with the subject "Minor Account Report". We take these reports very seriously and will act promptly.

Playtok may update this Privacy Policy from time to time to reflect changes in Philippine law, NPC guidance, our business operations, or the way the platform functions. When we make material changes, we will notify registered players via email and/or an in-platform notification at least 7 days before the changes take effect.

The effective date of the current version is always displayed at the top of this page and in the "Last Updated" indicator in the table of contents. We encourage you to review this policy periodically so you are always aware of how your data is being handled at Playtok.

Continued use of the Playtok platform after a policy update takes effect constitutes your acceptance of the revised policy. If you do not accept the updated policy, you should stop using the platform and contact us to close your account.

For all privacy-related inquiries, data rights requests, concerns about data processing, or to report a potential data breach, please contact the Playtok Data Privacy Officer:

• Email: support@playtok.click — subject line: "Data Privacy Inquiry" or "Data Rights Request"
• Live Chat: Available 24/7 on the Playtok platform — ask to be connected to the Data Privacy team.

We will acknowledge your inquiry within 2 business days and aim to resolve all data rights requests within 15 business days. For complex requests requiring additional review, we will notify you of an extended timeline.

If you feel your privacy concern has not been adequately addressed, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC's mandate is to uphold Filipino citizens' rights under the Data Privacy Act of 2012, and their contact information is publicly available on their official government website.