weakph Privacy Policy

1.Overview & Scope

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by weakph ("we," "us," "our") in connection with the operation of the weakph platform accessible at weakph.org ("the Platform"). It governs data collected from visitors, registered players, and prospective users of the Platform, regardless of whether they are accessing it from Metro Manila, Cebu, Davao, or any other location in the Philippines.

weakph operates as a data controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "the DPA"). As data controller, weakph determines the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted lawfully, fairly, and transparently.

This Policy should be read in conjunction with the weakph Terms & Conditions and Responsible Gaming Policy. By creating a weakph account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2.Personal Data We Collect

weakph collects the following categories of personal data from registered players and Platform users:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (passport number, driver's license number, SSS number, PhilHealth ID number, or PRC ID number) as required for Know Your Customer (KYC) verification;
• Contact Data: Philippine mobile number (used as the primary account identifier), email address, and residential address;
• Financial Data: GCash account number or registered mobile number, Maya account details, bank account numbers (BPI, BDO, UnionBank, Metrobank), deposit and withdrawal transaction records, and wallet balance history;
• Technical Data: IP address, device type and operating system, browser type, session duration, login timestamps, and geographic location data derived from IP address;
• Usage Data: Game history, bet amounts, session frequency, game preferences, promotional offers accessed, and customer support interaction records;
• Communications Data: Records of live chat sessions, support ticket submissions, and any documents or images submitted during identity verification.

weakph does not collect sensitive personal information such as racial or ethnic origin, religious beliefs, health data, or sexual orientation, unless such information is voluntarily and explicitly provided by the player in a support communication context.

2.How We Collect Your Data

weakph collects personal data through the following mechanisms:

• Direct submission: Information you provide when registering a weakph account, completing KYC verification, submitting a support request, or updating your account profile;
• Automated technical collection: Data collected automatically when you access the Platform, including through cookies, server logs, and analytics tools that record device and session information;
• Payment processing: Transaction data received from GCash, Maya, BPI, BDO, UnionBank, and other payment providers when you deposit or withdraw funds;
• Third-party game providers: Game session data from providers such as Evolution, JILI, Pragmatic Play, and PG Soft, transmitted to weakph for account crediting and gaming history purposes;
• Regulatory sources: Data received from PAGCOR or other Philippine regulatory bodies in connection with licensing compliance, exclusion database checks, or investigation procedures.

4.Purpose & Legal Basis for Processing

weakph processes your personal data for the following purposes and on the following legal bases under the Philippine DPA:

• Account management and platform operation — necessary for the performance of the contract between weakph and the player;
• Identity verification and KYC compliance — required by PAGCOR licensing conditions and Philippine anti-money laundering regulations (Republic Act No. 9160, as amended);
• Payment processing and fraud prevention — necessary for the performance of the contract and for compliance with financial crime prevention obligations;
• Responsible gaming monitoring — undertaken in pursuit of weakph's legitimate interest in identifying and assisting players who may be exhibiting problem gambling behaviors, and in compliance with PAGCOR responsible gaming requirements;
• Customer support and dispute resolution — necessary for the performance of the contract and for compliance with consumer protection obligations;
• Marketing communications — conducted on the basis of your explicit consent, which you may withdraw at any time through your account notification settings;
• Legal compliance and regulatory reporting — required to fulfil weakph's obligations under Philippine law, PAGCOR licensing conditions, and court or regulatory orders.

5.Data Sharing & Disclosure

weakph does not sell your personal data. We share your data only in the following circumstances and with the following categories of recipients:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, and other payment service providers receive the minimum data necessary to process your financial transactions;
• Game software providers: Third-party game studios receive your account identifier and session data to facilitate gameplay and return game results;
• Identity verification services: KYC verification partners may process copies of your government-issued ID documents to complete the identity verification process;
• PAGCOR and regulatory authorities: weakph is required to share player data with PAGCOR upon request and to report certain transaction types to the Anti-Money Laundering Council (AMLC) as mandated by Philippine law;
• Law enforcement: weakph will disclose personal data to Philippine law enforcement agencies where required by a valid court order, search warrant, or other legally binding directive;
• Successors in interest: In the event of a merger, acquisition, or sale of the weakph business, player data may be transferred to the acquiring entity, subject to that entity's commitment to this Privacy Policy's standards.

All third-party recipients of weakph player data are subject to contractual data processing agreements that require them to process data only as instructed by weakph and to maintain appropriate security measures.

6.Data Retention

weakph retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account registration and identity verification data: retained for a minimum of 5 years following account closure, as required by PAGCOR licensing conditions and AMLC reporting obligations;
• Financial transaction records: retained for 10 years from the date of transaction, in compliance with Philippine AML law;
• Customer support and dispute records: retained for 3 years from the resolution of the relevant interaction;
• Marketing consent records: retained until consent is withdrawn, plus 1 year as evidence of the consent;
• Technical log data: typically retained for 90 days, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, weakph will securely delete or anonymize personal data in accordance with its internal data disposal procedures.

7.Data Security

weakph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between player devices and weakph servers;
• Encrypted storage of sensitive data fields including payment identifiers and identity document details;
• Multi-factor authentication requirements for administrative access to production systems;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Incident response procedures with mandatory notification timelines in compliance with the National Privacy Commission's breach notification requirements.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, weakph will notify you without undue delay and will report the breach to the National Privacy Commission within 72 hours of becoming aware of it, as required by NPC Circular 16-03.

8.Cookies & Tracking Technologies

weakph uses cookies and similar tracking technologies to operate the Platform, maintain your session state, remember your preferences, and analyze Platform usage. The categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your weakph session. These cannot be disabled without preventing access to the Platform;
• Functional cookies: Used to remember your preferences such as language settings and game lobby filters;
• Analytical cookies: Used to understand how players use the Platform in aggregate, helping weakph improve performance and identify issues. Data collected is anonymized where possible;
• Marketing cookies: Used only with your consent to track referral sources and measure the effectiveness of promotional campaigns. No data from marketing cookies is shared with third-party advertising networks for their independent use.

You can manage cookie preferences through your browser settings. Note that disabling functional or analytical cookies may affect your experience on the weakph platform.

9.Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by weakph:

• Right to be informed: The right to know what personal data weakph holds about you, how it is used, and with whom it is shared — as described in this Policy;
• Right of access: The right to request a copy of the personal data weakph holds about you;
• Right to correction: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of personal data, subject to weakph's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission if you believe your data rights have been violated.

To exercise any of these rights, please contact the weakph Data Privacy Officer at the contact details set out in Section 12 of this Policy. weakph will respond to valid requests within 30 calendar days.

10.Protection of Minors

weakph does not knowingly collect personal data from persons under 21. Age verification is conducted during the registration process and through KYC checks. If you believe that a minor has provided personal data to weakph, please contact our support team immediately so that we can take appropriate action.

11.Changes to This Policy

weakph may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or our data processing practices. Material changes — including changes that affect your rights or the categories of data we collect — will be communicated to registered players via the mobile number or email address on file at least 7 days before the changes take effect.

The current version of this Policy is always accessible at weakph.org/privacy-policy. The "Last updated" date at the top of this page indicates when the most recent revision was published.

12.Contact & Data Privacy Officer

For any privacy-related inquiries, requests to exercise your data rights, or to report a potential data security issue, please contact the weakph Data Privacy Officer:

For complaints that cannot be resolved directly with weakph, you may contact the National Privacy Commission of the Philippines through their official channels.