cashph
Privacy Policy

cashph is committed to protecting the privacy and security of all personal information entrusted to us by our players and website visitors. We understand that privacy matters deeply — especially in the context of an online gaming platform where financial transactions and identity verification are involved.

This Privacy Policy applies to all personal data collected through the cashph website at https://cashph.app, any associated mobile applications, and all related services, features, and communications provided by cashph. It applies to all users regardless of their location, though it is specifically designed to reflect the requirements of Philippine law.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding data privacy matters, this Privacy Policy shall prevail.

If you have any questions about how cashph handles your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer (DPO) using the contact details provided in Section 15 of this policy.

cashph collects personal data that is necessary for the operation of our platform, the provision of gaming services, and compliance with applicable legal and regulatory obligations. The categories of personal data we collect include:

2.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification — players must be 21 years or older)
• Residential address (including city, province, and postal code)
• Email address
• Mobile phone number
• Username and encrypted password
• Nationality and citizenship status

2.2 Identity Verification (KYC) Data

• Government-issued photo ID (e.g., PhilSys National ID, passport, driver's license, UMID, SSS ID, voter's ID, or PRC ID)
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate)
• Selfie or live photo for identity matching purposes
• Source of funds documentation where required by AML regulations

2.3 Financial & Transaction Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details (BPI, BDO, Metrobank) for withdrawal processing
• Deposit and withdrawal transaction history
• Wagering history and game activity records
• Bonus and promotion redemption records

2.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, login timestamps, and activity logs
• Pages visited, features used, and navigation patterns within the platform
• Cookies and similar tracking technologies (see Section 7)

2.5 Communications Data

• Records of live chat conversations with our support team
• Email correspondence with cashph
• Feedback, complaints, and dispute records
• Survey responses and promotional participation records

cashph collects personal data through the following channels and methods:

• Direct Registration: When you create a cashph account, you provide your name, date of birth, contact details, and other registration information directly through our registration form.
• KYC Submission: When you submit identity documents for account verification, either through our platform's document upload feature or via our support team.
• Deposits & Withdrawals: When you initiate financial transactions, your payment method details and transaction data are collected and recorded.
• Platform Usage: As you use the cashph platform, we automatically collect technical and usage data through server logs, cookies, and analytics tools.
• Customer Support: When you contact our support team via live chat or email, we collect and retain records of those communications.
• Promotions & Surveys: When you participate in cashph promotions, competitions, or surveys, we collect the information you provide in connection with those activities.
• Third-Party Verification Services: We may receive data from third-party identity verification providers used to assist with KYC compliance, and from payment processors to confirm transaction status.

cashph uses the personal data we collect for the following purposes:

cashph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

Under the Philippine Data Privacy Act of 2012, cashph processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and cashph — specifically, to provide you with access to the gaming platform, process your transactions, and manage your account.
• Legal Obligation: Processing is required for cashph to comply with applicable legal and regulatory obligations, including KYC requirements, AML regulations, and reporting obligations under Philippine gaming regulations.
• Legitimate Interests: Processing is necessary for cashph's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending you promotional communications, newsletters, or personalized offers — cashph relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time by contacting our support team or updating your communication preferences in your account settings.

cashph does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank, for the purpose of processing your deposits and withdrawals. These providers receive only the data necessary to complete your transaction.
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist cashph in verifying player identities and screening against sanctions lists and politically exposed persons (PEP) databases.
• Gaming Software Providers: Game developers and live dealer studio operators whose games are available on the cashph platform. These providers may receive limited technical data necessary to deliver game content and maintain game integrity.
• IT & Cloud Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers who process data on cashph's behalf under strict data processing agreements.
• Regulatory Authorities: Philippine government agencies and regulatory bodies, including but not limited to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and law enforcement agencies, where disclosure is required by law, court order, or regulatory directive.
• Professional Advisors: Legal counsel, auditors, and accountants, where disclosure is necessary for the provision of professional services to cashph, subject to professional confidentiality obligations.

All third parties with whom cashph shares personal data are required to process that data in accordance with applicable data protection laws and cashph's data protection standards. cashph does not authorize any third party to use your personal data for their own independent marketing or commercial purposes.

cashph uses cookies and similar tracking technologies on the cashph platform. Cookies are small text files stored on your device that help us deliver a better, more personalized experience. The types of cookies we use are described below:

cashph does not use third-party advertising cookies or cross-site tracking cookies. You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the cashph platform.

cashph retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard data retention periods are as follows:

• Account Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AML record-keeping requirements under Philippine law.
• KYC Documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later, as required by AML regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with financial record-keeping obligations.
• Customer Support Records: Retained for 3 years from the date of the last interaction, or longer if the records are relevant to an ongoing dispute or legal proceeding.
• Technical & Usage Logs: Retained for up to 12 months for security and fraud detection purposes, after which they are anonymized or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for 3 years following withdrawal of consent, as evidence of the consent given.

When personal data is no longer required, cashph will securely delete or anonymize it in accordance with our data disposal procedures. Where anonymization is not technically feasible, the data will be securely archived with access controls in place.

cashph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and cashph servers is encrypted using TLS 1.2 or higher, ensuring that your data cannot be intercepted in transit.
• AES-256 Encryption at Rest: Sensitive personal data stored on cashph servers — including KYC documents, financial data, and account credentials — is encrypted using AES-256 encryption.
• Password Hashing: User passwords are never stored in plain text. cashph uses industry-standard bcrypt hashing with salting to protect password data.
• Two-Factor Authentication (2FA): cashph offers optional two-factor authentication for player accounts, adding an additional layer of security beyond username and password.
• Access Controls: Access to personal data within cashph is restricted on a strict need-to-know basis. All staff with access to personal data undergo data privacy training and are bound by confidentiality obligations.
• Regular Security Audits: cashph conducts regular internal and third-party security audits and penetration testing to identify and remediate vulnerabilities in our systems.
• Incident Response: cashph maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, cashph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by cashph:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfils that obligation.
• Right of Access: You have the right to request a copy of the personal data that cashph holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that cashph holds about you. You can update most account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to cashph's legal obligations to retain certain data (see Section 8).
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to cashph's ability to demonstrate compelling legitimate grounds.
• Right to Restrict Processing: You have the right to request that cashph restricts the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that cashph has violated your data privacy rights.

The cashph platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. cashph does not knowingly collect personal data from individuals under the age of 21.

If cashph discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all personal data collected from that individual, and return any deposited funds to the payment method used, in accordance with our underage gambling prevention procedures.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account on the cashph platform, please contact our support team immediately. We will investigate and take appropriate action without delay.

cashph primarily stores and processes personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and gaming software partners — may process data in other countries.

Where personal data is transferred outside the Philippines, cashph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include:

• Contractual clauses in data processing agreements that require the recipient to protect personal data to Philippine standards.
• Transfers to countries that have been assessed as providing an adequate level of data protection.
• Binding corporate rules where data is transferred within a corporate group.

By using the cashph platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

The cashph platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies only to the cashph platform and does not cover the privacy practices of any third-party websites or services.

cashph is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party services you access through or in connection with the cashph platform.

cashph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, cashph will notify registered players via email or through a prominent notice on the cashph platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy reflects the date of the most recent revision. Your continued use of the cashph platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you must stop using the cashph platform and may request account closure by contacting our support team.

We recommend that you review this Privacy Policy periodically to stay informed about how cashph protects your personal data. All previous versions of this Privacy Policy are archived and available upon request from our Data Protection Officer.

cashph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact our DPO using the details below:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.

cashph takes all privacy complaints seriously and will investigate every concern raised in good faith. We are committed to resolving data privacy issues promptly, fairly, and transparently — because your trust is the foundation of everything we do at cashph.