mineph Privacy Policy

This Privacy Policy applies to all personal information collected and processed by mineph in connection with your use of the mineph platform at mineph.org, including your Player Account, wallet transactions, gaming activity, customer support interactions, and marketing communications. It applies equally to users accessing the platform via mobile browser, desktop browser, or any other channel through which mineph services are made available.

By registering for a mineph Account, depositing funds, or otherwise using any mineph service, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. Where your consent is the legal basis for processing, you have the right to withdraw that consent at any time, subject to the limitations described in this Policy.

This Policy should be read alongside the mineph Terms and Conditions, which govern your overall use of the Platform. In the event of any conflict between this Policy and the Terms and Conditions on matters of personal data, this Policy shall prevail.

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), mineph is the Personal Information Controller (PIC) in respect of all personal data collected through the mineph platform. As the PIC, mineph determines the purposes for which personal data is processed and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

mineph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with RA 10173. The DPO can be contacted using the details provided in Section 16 of this Policy. All data rights requests, privacy complaints, and data protection enquiries should be directed to the DPO in the first instance.

Where mineph engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification services, or technical infrastructure providers — those parties act as Personal Information Processors (PIPs) under RA 10173 and are contractually bound to process data only as instructed by mineph and in compliance with applicable Philippine law.

mineph collects several categories of personal information in the course of providing its gaming and account services. The specific information collected depends on how you interact with the Platform:

mineph does not intentionally collect sensitive personal information beyond what is necessary for KYC compliance (government ID data). We do not collect health data, political opinions, or religious beliefs unless specifically required by PAGCOR regulation in exceptional circumstances.

mineph collects personal information through the following primary channels:

• Direct collection: Information you actively provide when registering for a mineph Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and session analytics tools when you access and interact with the mineph platform. This includes IP addresses, browser fingerprint data, and game session metadata.
• Third-party sources: Identity and fraud screening data provided by our PAGCOR-authorised KYC verification partner in the context of your account verification. Payment confirmation data from GCash, PayMaya, and Philippine bank payment gateways. PAGCOR self-exclusion registry data shared for responsible gaming enforcement purposes.

mineph processes your personal data for the following purposes, each supported by an appropriate legal basis under the Philippine Data Privacy Act of 2012:

• Account creation and management — Processing necessary for the performance of the player account agreement between you and mineph. Legal basis: Contractual necessity.
• KYC identity and age verification — Required by PAGCOR licensing conditions and Philippine AML/CFT law. Legal basis: Legal obligation.
• Payment processing and withdrawal management — Necessary to process deposits, withdrawals, and maintain accurate PHP wallet records. Legal basis: Contractual necessity and legal obligation.
• Fraud prevention and security monitoring — Processing necessary to detect and prevent fraudulent activity, money laundering, and unauthorized account access. Legal basis: Legitimate interests of mineph and legal obligation.
• Responsible gaming compliance — Maintenance of self-exclusion status, deposit limits, and PAGCOR self-exclusion registry checks. Legal basis: Legal obligation.
• Customer support and dispute resolution — Processing necessary to respond to your queries and resolve account disputes. Legal basis: Contractual necessity and legitimate interests.
• Marketing and promotional communications — Sending you information about mineph promotions, bonuses, and new games where you have opted in. Legal basis: Your consent (which may be withdrawn at any time).
• Platform analytics and improvement — Aggregate analysis of platform usage to improve game offerings, user experience, and technical performance. Legal basis: Legitimate interests of mineph.
• Regulatory reporting — Reporting to PAGCOR and other Philippine regulatory and law enforcement authorities as required by law. Legal basis: Legal obligation.

mineph will not process your personal data for purposes incompatible with those listed above without first obtaining your additional consent or establishing another applicable legal basis under RA 10173.

mineph does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal information with the following categories of recipients only to the extent strictly necessary:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other licensed Philippine payment processors, solely for the purpose of processing deposits and withdrawals in PHP.
• KYC and identity verification services: PAGCOR-authorised identity verification partners who perform age verification, government ID authentication, and fraud screening on our behalf.
• Game content and technology providers: Licensed game studios and platform technology providers who supply games and software to mineph under data processing agreements that restrict their use of player data.
• PAGCOR and Philippine regulatory authorities: Disclosures required by our PAGCOR license, including player activity reports, suspicious transaction reports under the AMLA, and any information required by court order or lawful regulatory direction.
• Law enforcement and government agencies: Where required by Philippine law, court order, or lawful demand from a competent authority.
• Professional advisers: Lawyers, auditors, and accountants under binding duties of confidentiality, where necessary for the legal and financial management of mineph's operations.

mineph retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce agreements. Specific retention periods include:

• Account and identity data: Retained for the duration of your active mineph Account and for a minimum of five (5) years following permanent account closure, in accordance with Philippine AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of ten (10) years from the date of the transaction, in accordance with the Philippine Anti-Money Laundering Act (AMLA) and related AMLC regulations.
• KYC documentation: Retained for the period of the player relationship plus five (5) years, or longer if required by a specific PAGCOR or AMLC direction.
• Customer support records: Retained for three (3) years from the date of the interaction, or longer if the interaction relates to a pending dispute or regulatory matter.
• Marketing consent records: Retained for the period of the player relationship and for one (1) year following withdrawal of consent, for compliance demonstration purposes.
• Technical and session logs: Retained for up to twelve (12) months for security and fraud detection purposes.

Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is applied, aggregated data may be retained indefinitely for statistical and analytical purposes.

The mineph platform uses cookies and similar technologies to enable platform functionality, maintain your login session, remember your preferences, and collect aggregate analytics data. We categorise our cookies as follows:

• Strictly Necessary Cookies: Required for the mineph platform to function. These include session authentication tokens, CSRF protection cookies, and load balancing cookies. These cannot be disabled without affecting your ability to use mineph.
• Functional Cookies: Remember your language preferences, last-visited game category, and display settings. Disabling these will not prevent platform access but may affect your experience.
• Analytics Cookies: Collect aggregate, anonymised data about how players navigate the mineph platform — which pages are visited most frequently, where users drop off, and which game categories are most popular. This data helps us improve the platform. No personal identification is involved in analytics processing.

mineph does not use advertising cookies, remarketing pixels, or cross-site tracking technologies of any kind. We do not allow third-party advertising networks to place cookies on the mineph platform.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent platform functionality. Blocking analytics cookies will have no impact on your gaming experience at mineph.

mineph implements a multi-layered security framework to protect your personal information against unauthorized access, accidental loss, destruction, disclosure, or alteration. Our technical and organisational security measures include:

• Transport Layer Security (TLS): All data transmissions between your device and mineph servers are encrypted using TLS 1.2 or higher. The presence of "https://" in your browser address bar confirms this encryption is active.
• Data at rest encryption: Personal data stored in mineph's databases is encrypted using AES-256 encryption. Backup data is subject to the same encryption standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis using role-based access controls. All internal access to player records is logged and auditable.
• Two-factor authentication: Available to all Players for Account login security, and mandated for all mineph staff accessing production systems.
• Penetration testing and vulnerability assessments: mineph's platform undergoes regular security assessments by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All mineph employees who handle personal data receive mandatory data privacy training aligned with NPC guidelines for personal information controllers under RA 10173.

As a data subject under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal information held by mineph. These rights may be exercised by contacting mineph's Data Protection Officer using the details in Section 16:

The mineph platform is strictly intended for individuals who are at least 21 years of age. This age restriction is mandated by PAGCOR and Philippine gaming law for all casino-style and sports betting gaming activities. mineph does not knowingly collect personal information from individuals under the age of 21.

Age verification is conducted as part of the mandatory KYC process for all Player Accounts. Where mineph has reasonable grounds to believe that a User is under the age of 21, the Account will be immediately suspended pending verification. If it is confirmed that a Player is under 21, the Account will be permanently closed, all activity voided, and the matter reported to PAGCOR as required by our license.

With your consent, mineph may send you marketing communications about platform promotions, bonus offers, new game launches, and seasonal campaigns via email and SMS. This consent is collected at the point of account registration and through your Account communication preferences.

You have the right to opt out of marketing communications at any time by:

• Using the unsubscribe link included in every marketing email sent by mineph.
• Updating your communication preferences in the mineph Account settings panel.
• Contacting mineph Customer Support or the Data Protection Officer and requesting removal from marketing lists.

Opting out of marketing communications will not affect your ability to use the mineph platform or receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are essential to your Account and cannot be disabled.

mineph does not conduct telemarketing calls. All marketing from mineph is delivered via email and SMS only, and only to Players who have explicitly consented.

The mineph platform is operated primarily within the Philippines. However, some of our technology and service provider infrastructure — including certain game content servers, cloud infrastructure, and third-party software tools — may be operated from or accessible by entities located outside the Philippines.

Where personal data is transferred outside the Philippines, mineph will ensure that such transfers are carried out only to countries or entities that provide an adequate level of data protection as recognised under RA 10173 and NPC guidance, or where mineph has implemented appropriate contractual safeguards — such as NPC-approved standard contractual clauses — to protect the personal data of Filipino data subjects in transit.

mineph will not transfer personal data internationally in a manner that would diminish the privacy rights you hold under Philippine law. Details of any specific cross-border transfers applicable to your data may be requested from the mineph Data Protection Officer.

In the event of a personal data breach — defined as any accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed by mineph — we will follow the breach notification procedures required by the Philippine Data Privacy Act and NPC Circular No. 16-03.

Specifically, mineph will:

• Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of a breach that is likely to result in a risk to the rights and freedoms of affected data subjects.
• Notify affected Players without undue delay where the breach is likely to result in a high risk to their rights — for example, where it involves financial data, identity data, or login credentials.
• Provide affected Players with information about the nature of the breach, the categories of data involved, the likely consequences, and the measures mineph has taken or proposes to take to address the breach.
• Conduct a thorough post-incident investigation and implement remediation measures to prevent recurrence.

If you become aware of any suspected unauthorized access to your mineph Account or believe your personal data may have been compromised, please contact mineph immediately through the support contact details in Section 16 so we can investigate and take prompt protective action.

mineph reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. Any material changes will be communicated to registered Players by email to the registered Account address and/or by a prominent notice on the mineph platform at least fourteen (14) days before the change takes effect, except where immediate amendment is required by law.

The most current version of this Privacy Policy will always be available at mineph.org/privacy-policy. The Effective Date shown at the top of this document reflects the date of the most recent revision. Where a material amendment alters the purposes for which we process your data or affects your data rights in a meaningful way, we will seek your fresh consent before the revised Policy takes effect.

Your continued use of the mineph platform following publication of any amended Policy constitutes your acknowledgment of the changes. If you do not agree to a revised Policy, you should immediately cease using the mineph platform and contact our support team to arrange account closure.

If you wish to exercise your data rights, have a question or concern about this Privacy Policy, wish to report a potential data breach, or want to withdraw your consent to marketing communications, please contact the mineph Data Protection Officer:

• Data Protection Officer Email: support@mineph.org (plain text — not a clickable link)
• Customer Support Email: support@mineph.org
• Support Hours: 24 hours a day, 7 days a week, Philippine Standard Time (GMT+8)
• Service Regions: Manila, Cebu, Davao, Quezon City, Makati, and all Philippine regions

For complaints about mineph's handling of your personal data that have not been resolved to your satisfaction after contacting the DPO, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for the administration and enforcement of the Philippine Data Privacy Act of 2012. NPC contact information is available through official Philippine government channels.