kongph Privacy Policy
kongph is committed to protecting the personal data of every Filipino player who uses our platform. This Privacy Policy explains what information we collect, why we collect it, how we use and safeguard it, and what rights you hold under Philippine law. We operate in full compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and the regulations of the National Privacy Commission (NPC) and PAGCOR.
Summary: kongph collects only the personal data necessary to operate a safe, PAGCOR-licensed online casino for Filipino players. We do not sell your data to third parties for marketing. We retain data only as long as legally required or operationally necessary. You have enforceable rights over your data under Republic Act No. 10173. By creating a kongph account or using the kongph platform, you acknowledge that you have read and understood this Privacy Policy.
1 Who We Are
The data controller for personal data collected through the kongph platform is the operator of kongph, accessible at kongph.cam, a PAGCOR-licensed online gaming operator serving Filipino players across the Philippines. References in this Privacy Policy to "kongph," "we," "us," or "the Company" refer to this licensed operator.
kongph is subject to the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) with respect to gaming operations, and to the National Privacy Commission (NPC) of the Philippines with respect to personal data processing, pursuant to Republic Act No. 10173 (the Data Privacy Act of 2012) and its Implementing Rules and Regulations.
kongph has appointed a Data Protection Officer (DPO) responsible for overseeing the Company's data protection practices and serving as the point of contact for NPC inquiries and data subject rights requests. Contact details for the DPO are set out in Section 14 of this Policy.
2 Data We Collect
kongph collects the following categories of personal data in the course of operating the platform and fulfilling our regulatory obligations:
| Category | Examples | Why Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number and type | KYC verification, age verification, PAGCOR compliance, AML obligations |
| Contact Data | Email address, Philippine mobile number, home address (for enhanced KYC) | Account communications, 2FA, withdrawal notifications, support |
| Financial Data | GCash number, PayMaya number, bank account details (BPI, BDO, Metrobank), transaction history | Payment processing, withdrawal verification, AML monitoring |
| Gaming Data | Game history, wagering amounts, win/loss records, session duration, betting patterns | Service delivery, responsible gaming monitoring, dispute resolution, PAGCOR reporting |
| Technical Data | IP address, device type and identifier, browser type, operating system, login timestamps | Security monitoring, fraud prevention, geographic access controls |
| Communications Data | Live chat transcripts, support emails, survey responses | Service improvement, dispute records, quality assurance |
| KYC Documents | Scanned or photographed government-issued ID (PhilSys, passport, UMID, driver's license, PRC ID), proof of address | Identity verification, PAGCOR KYC mandate, AML compliance |
kongph does not collect sensitive personal information as defined under Section 3(l) of RA 10173 — such as racial origin, political affiliation, health records, or sexual orientation — unless specifically required by applicable law or regulatory direction and with appropriate legal basis for doing so.
3 How We Collect Data
kongph collects personal data through the following means:
- Direct provision by you: When you register a kongph account, complete the KYC verification process, make a deposit or withdrawal request, contact customer support, or submit a complaint, you provide personal data directly to kongph.
- Automated collection during platform use: Technical data — including IP addresses, device identifiers, session timestamps, and browser information — is collected automatically when you access and navigate the kongph platform through standard server log and analytics mechanisms.
- Cookies and tracking technologies: The kongph platform uses cookies and similar technologies as described in Section 7 of this Policy. These technologies collect usage and preference data to improve platform performance and personalization.
- Third-party verification providers: When you submit government-issued identification for KYC verification, your identity documents are processed by a PAGCOR-approved third-party identity verification service provider on behalf of kongph. Data shared with that provider is subject to their own data processing terms and appropriate contractual safeguards.
- Payment processors: When you initiate a deposit or withdrawal via GCash, PayMaya, BPI, BDO, or Metrobank, transaction confirmation data is received by kongph from the relevant payment processor to confirm the status and amount of your transaction.
4 Legal Bases for Processing
Under Republic Act No. 10173, kongph processes your personal data on the following legal bases, which determine the purpose and scope of each processing activity:
- Contractual necessity: Processing required to enter into or perform the contract between you and kongph — including account creation, game provision, and payment processing — is carried out on the basis that it is necessary to fulfil the service you have requested.
- Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and other applicable Philippine law is carried out on the basis of legal obligation.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of kongph's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: Processing for marketing communications (where not covered by the service relationship) and for certain cookie-based analytics is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing carried out before withdrawal.
5 How We Use Your Data
kongph uses the personal data it collects for the following specific purposes:
- Creating and managing your kongph account, including authentication (login verification and two-factor authentication).
- Verifying your identity and age in compliance with PAGCOR's KYC requirements — specifically confirming that you are 21 years of age or older as required under Philippine gaming regulations.
- Processing deposits and withdrawals to and from your kongph account via GCash, PayMaya, and Philippine bank accounts.
- Providing access to casino games, sports betting markets, live casino tables, bingo rooms, and sabong streams on the kongph platform.
- Detecting, investigating, and preventing fraudulent transactions, money laundering, multi-accounting, and other forms of abuse in compliance with RA 9160 and PAGCOR directives.
- Monitoring your gaming activity to identify responsible gaming indicators — such as unusual session lengths, rapid loss escalation, or self-exclusion criteria — and to administer responsible gaming tools including deposit limits and cooling-off periods.
- Responding to your inquiries, complaints, and support requests via live chat and email.
- Sending transactional notifications — such as deposit confirmations, withdrawal status updates, and security alerts — to your registered email address and Philippine mobile number.
- Sending promotional communications about kongph bonuses, events, and new game releases, where you have not opted out of marketing communications (see Section 10 for your right to object).
- Preparing and submitting regulatory reports to PAGCOR and the Anti-Money Laundering Council (AMLC) as required by law.
- Maintaining transaction and gaming records for the periods required by Philippine law and PAGCOR regulations, and for use in dispute resolution proceedings.
kongph does not use your personal data to make fully automated decisions — including automated profiling — that produce legal or similarly significant effects on you, without providing you with an opportunity for human review. Automated fraud detection flags are reviewed by the kongph compliance team before any account action is taken.
6 Data Sharing & Disclosure
kongph does not sell, rent, or otherwise transfer your personal data to third parties for their independent marketing or commercial purposes. We share your personal data only in the following circumstances and only to the extent strictly necessary:
- Service providers and processors: We share data with trusted third-party service providers who process data on our behalf under written data processing agreements. These include payment processors (GCash / GXchange Inc., Voyager Innovations Inc. / PayMaya, and Philippine banks), identity verification providers, cloud hosting providers, game software providers, and customer support platform providers. All processors are required to implement appropriate technical and organizational security measures and to process data only on kongph's documented instructions.
- Regulatory authorities: We are legally required to disclose transaction data, player identity information, and suspicious activity reports to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities upon valid legal demand, court order, or as part of our statutory reporting obligations.
- Legal proceedings: We may disclose personal data to courts, law enforcement agencies, or legal advisors where required to establish, exercise, or defend legal rights in connection with disputes, claims, or investigations involving the kongph platform.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of kongph's business, personal data held by kongph may be transferred to the acquiring entity, subject to equivalent privacy protections and notification to affected players as required by the NPC.
- With your explicit consent: We may share your data with any other party where you have given specific, informed, and freely given consent to that sharing.
7 Cookies & Tracking Technologies
The kongph platform uses cookies — small text files stored on your device by your browser — and similar technologies including local storage and session tokens. These technologies serve the following functions on the kongph platform:
- Essential / strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security tokens, and cookies that remember your login state. These cannot be disabled without preventing access to the platform.
- Functional cookies: Remember your preferences such as selected language, preferred game lobby view, and responsible gaming settings. Disabling these may affect your experience but will not prevent access to the platform.
- Analytics cookies: Collect aggregated and anonymized data about how players navigate the kongph platform — which pages are visited most, how long sessions last, and where users encounter errors. This data helps kongph improve the platform. Analytics cookies are deployed only with your consent, which you may withdraw at any time.
- Security / fraud prevention cookies: Assist in identifying abnormal browsing patterns, automated bot activity, and multi-account behavior. These form part of kongph's fraud prevention infrastructure and are classified as essential for security purposes.
You may manage cookie preferences through your browser's settings. Note that blocking essential cookies will prevent you from logging in to or using the kongph platform. Blocking functional or analytics cookies will not affect your ability to access games or process transactions.
8 Data Retention
kongph retains your personal data for the periods required by applicable Philippine law and regulatory obligations, or for as long as necessary to fulfil the purposes described in this Policy — whichever is longer. The following retention periods apply as a baseline:
- Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act record-keeping requirements.
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with RA 9160 (Anti-Money Laundering Act) as amended.
- Gaming history: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and responsible gaming audit purposes.
- Support communications: Retained for two (2) years from the date of resolution, for quality assurance and legal dispute purposes.
- Cookies and analytics data: Session cookies are deleted when you close your browser. Persistent analytics cookies are retained for a maximum of twelve (12) months.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with NPC-recommended data disposal procedures.
9 Data Security
kongph implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. Our security framework includes, but is not limited to:
- Encryption in transit: All data transmitted between your device and the kongph platform is encrypted using TLS 1.3 with 256-bit AES encryption. Connections over unencrypted HTTP are automatically redirected to HTTPS.
- Encryption at rest: Sensitive personal data stored in kongph's databases — including KYC documents and financial data — is encrypted at rest using industry-standard encryption protocols.
- Password security: Account passwords are stored as salted cryptographic hashes using a one-way hashing algorithm. kongph staff cannot retrieve your plaintext password; only you know it.
- Access controls: Personal data is accessible only to kongph staff members who require it to perform their job functions. Access is governed by role-based permissions, multi-factor authentication for staff systems, and comprehensive audit logging of all access events.
- Security monitoring: kongph's security team monitors platform infrastructure for intrusion attempts, unusual data access patterns, and other security events on a continuous basis.
- Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, kongph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects promptly in the manner prescribed by the NPC's breach notification guidelines.
No internet-based system can guarantee absolute security. While kongph takes all reasonable and practicable steps to protect your personal data, we cannot warrant the complete security of data transmitted over the internet. You are responsible for maintaining the security of your kongph account credentials, including your password and two-factor authentication device.
10 Your Rights Under RA 10173
As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you hold the following enforceable rights with respect to your personal data processed by kongph. To exercise any of these rights, submit a written request to the kongph Data Protection Officer at the contact details provided in Section 14.
Right to Be Informed
You have the right to be told how kongph collects, uses, and shares your personal data — which is the purpose of this Privacy Policy. We inform you at the point of collection and through this document.
Right to Access
You may request a copy of the personal data kongph holds about you, including information on how it has been processed. Requests are processed within 15 business days of receipt.
Right to Rectification
If your personal data held by kongph is inaccurate or incomplete, you have the right to request correction. Contact support via live chat or our DPO email to update your information.
Right to Erasure
You may request deletion of personal data that is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations — including AML record-keeping requirements under RA 9160.
Right to Object & Block
You may object to processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, subject to overriding compelling grounds.
Right to Data Portability
Where technically feasible, you may request a copy of personal data you have provided to kongph in a structured, commonly used, machine-readable format for transfer to another service provider.
11 Children & Minors
The kongph platform is strictly prohibited for persons under 21 years of age. This restriction applies to all forms of gaming and betting available on the kongph platform and is enforced through mandatory KYC age verification in compliance with PAGCOR regulations and RA 9487.
kongph does not knowingly collect or process personal data from individuals under the age of 21. If kongph becomes aware that it has inadvertently collected personal data from a person under 21, that data will be immediately deleted, the account suspended, and any winnings forfeited in accordance with kongph's Terms and Conditions.
If you believe that a minor has registered a kongph account, please report this to the kongph DPO immediately at the contact details set out in Section 14.
12 Cross-Border Data Transfers
Some of kongph's third-party service providers — including game software providers, cloud infrastructure providers, and international payment processors — are based outside the Philippines. In the course of providing services to the kongph platform, your personal data may be transferred to and processed in jurisdictions outside the Philippines.
kongph ensures that any cross-border transfer of personal data is carried out only where the destination country provides an adequate level of protection for personal data as recognized by the National Privacy Commission, or where appropriate contractual safeguards — such as NPC-standard data transfer agreements — are in place between kongph and the receiving party. We do not transfer personal data to jurisdictions that cannot meet these minimum standards without implementing additional protective measures.
By using the kongph platform and accepting this Privacy Policy, you acknowledge that your data may be transferred to and processed in countries outside the Philippines under the safeguards described above.
13 Changes to This Policy
kongph may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes to applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The effective date at the top of this Policy will be updated whenever a material change is made.
For material changes — those that significantly affect your rights or the way we use your data — kongph will provide advance notice via email or SMS to your registered contact details at least 7 days before the change takes effect. Your continued use of the kongph platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.
We recommend reviewing this Privacy Policy periodically. The most current version is always available on this page at kongph.cam/privacy-policy.
14 Contact & Data Protection Officer
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights under RA 10173, or wish to report a potential data privacy concern, please contact the kongph Data Protection Officer (DPO) using the contact details below:
- Data Protection Officer: kongph DPO
- Email: [email protected]
- Response time: Written requests to the DPO are acknowledged within 5 Philippine business days and responded to in full within 15 Philippine business days of receipt, in compliance with NPC timelines under RA 10173.
If you are not satisfied with kongph's response to a data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, which has jurisdiction to investigate complaints from Philippine data subjects regarding violations of RA 10173.
This Privacy Policy was last reviewed and updated in January 2026 in compliance with Republic Act No. 10173, its Implementing Rules and Regulations, applicable NPC issuances, and PAGCOR licensing conditions.
kongph's Privacy Commitments
Six concrete ways kongph protects the personal data of every Filipino player on the platform — in plain language, not legal jargon.
We Never Sell Your Data
kongph does not sell, rent, or otherwise transfer your personal data to any third party for their own marketing or commercial purposes — ever. Data is shared only with service providers necessary to operate the platform, and with regulators as required by Philippine law.
256-Bit Encryption
All data in transit is protected by TLS 1.3 with 256-bit AES encryption — the same standard used by Philippine online banking platforms. Sensitive data at rest, including KYC documents and financial records, is encrypted in kongph's secure cloud infrastructure.
Dedicated Data Protection Officer
kongph has appointed a DPO responsible for overseeing all data protection practices. The DPO is your first point of contact for exercising your rights under RA 10173, including access, rectification, and erasure requests. Responses within 15 Philippine business days are guaranteed.
Minimum Data Principle
kongph collects only the personal data necessary to operate the platform, comply with PAGCOR and AML regulations, and protect the security of our players. We do not collect data speculatively or retain it longer than legally required.
Marketing Opt-Out Respected
If you opt out of marketing communications from kongph — by adjusting your notification preferences in account settings or by contacting the DPO — your preference is applied immediately and permanently. You will still receive essential transactional notifications related to your account and payments.
NPC & PAGCOR Compliant
kongph's data practices comply with Republic Act No. 10173 (Data Privacy Act of 2012), NPC issuances, and PAGCOR licensing conditions. Data breach incidents are reported to the NPC within 72 hours as required by law. You may escalate unresolved privacy complaints directly to the NPC.
Play at kongph with Confidence
Your personal data is protected by 256-bit encryption, Philippine law, and a dedicated DPO — every time you log in to kongph. Join millions of Filipino players who trust kongph for secure, PAGCOR-licensed online gaming.
21+ only · PAGCOR regulated · RA 10173 compliant · Please gamble responsibly