Privacy Policy

kongph ("kongph," "we," "our," or "us") operates the online gaming and sports betting platform accessible at kongph.net (the "Platform"). As a PAGCOR-licensed operator serving Filipino players across the Philippines — from Metro Manila and Cebu to Davao and Quezon City — kongph processes personal data as a necessary part of delivering safe, compliant, and enjoyable gaming services.

This Privacy Policy ("Policy") describes how we collect, use, disclose, store, and protect personal information that you provide to us or that we collect about you in the course of your registration and use of the Platform. This Policy forms an integral part of the kongph Terms & Conditions.

By registering an Account on the Platform or by continuing to use the Platform after this Policy has been posted or updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree with any part of this Policy, you must discontinue use of the Platform and may request Account closure in accordance with the Terms & Conditions.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations, kongph is the personal information controller in respect of all personal data collected through the Platform.

Our designated Data Protection Officer ("DPO") is responsible for overseeing compliance with this Policy and with the DPA. You may contact the DPO directly for any data privacy concern using the contact details set out in Section 15 of this Policy.

kongph collects several categories of personal data in connection with your use of the Platform. The specific data collected depends on how you interact with the Platform and the verification requirements applicable to your Account at any given time.

We do not collect or store full payment card numbers. Payment transactions are processed through licensed Philippine payment service providers, and full financial instrument details remain with those providers subject to their own privacy policies.

kongph collects personal data through the following channels:

• Account Registration: When you create a kongph Account, you provide identity and contact data directly through the registration form on the Platform.
• KYC Verification: When you submit identity documents and selfie photographs as part of our Know Your Customer verification process, either upon registration or at the time of your first withdrawal request.
• Deposits and Withdrawals: When you initiate financial transactions through GCash, PayMaya, InstaPay, PESONet, BPI, BDO, Metrobank, or 7-Eleven, transaction data is passed to us by your payment service provider to confirm the transaction.
• Platform Usage: Automatically collected as you navigate the Platform, place wagers, and interact with games. This includes technical and gaming data recorded by our servers and analytics systems.
• Cookies and Tracking Technologies: As described in Section 10, we use cookies and similar technologies to collect technical data about your device and browsing behavior on the Platform.
• Customer Support Interactions: When you contact our support team via email at [email protected] or through the in-Platform chat tool, the communications and any personal data contained therein are collected and stored.
• Third-Party Sources: In limited circumstances, we may receive identity or address verification data from licensed third-party identity verification service providers, credit reference agencies, or fraud prevention databases operating in the Philippines.

kongph processes your personal data for the following specific, legitimate, and declared purposes:

• Account Management: To create, maintain, verify, and administer your kongph Account, including authentication of your identity at login and enforcement of the 21-years-of-age eligibility requirement.
• Service Delivery: To provide the gaming services available on the Platform, including slots, live dealer tables, bingo, sabong, sports betting on PBA, NBA, UFC, boxing, and other markets.
• Payment Processing: To process your deposits and withdrawal requests through licensed Philippine payment channels and to maintain accurate financial records of all transactions on your Account.
• Regulatory Compliance: To fulfill kongph's obligations under PAGCOR licensing conditions, the Philippine Anti-Money Laundering Act (Republic Act No. 9160, as amended), the Anti-Terrorism Financing laws, and other applicable Philippine statutes.
• KYC and Fraud Prevention: To verify your identity, detect and prevent fraud, money laundering, bonus abuse, and other prohibited conduct under the Terms & Conditions.
• Responsible Gaming: To administer deposit limits, self-exclusion programs, session time alerts, and cooling-off periods, and to identify Players who may be at risk of problem gambling.
• Customer Support: To respond to your queries, complaints, and support requests in a timely and effective manner.
• Platform Improvement: To analyze aggregated usage data for the purpose of improving Platform performance, game selection, and user experience for Filipino players.
• Marketing Communications: To send you promotional offers, bonus notifications, and event updates relating to kongph — but only where you have provided separate, specific consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].
• Legal Claims: To establish, exercise, or defend legal claims in connection with your Account or use of the Platform.

Under the Philippine Data Privacy Act of 2012, every processing of personal data must be grounded in at least one lawful basis. kongph relies on the following legal bases for the processing activities described in this Policy:

• Contractual Necessity: Processing is necessary to perform the contract between you and kongph (i.e., the Terms & Conditions) — including Account creation, gameplay, and payment processing.
• Legal Obligation: Processing is required to comply with kongph's obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act itself, and other applicable Philippine statutes.
• Legitimate Interests: Processing is necessary for kongph's legitimate interests in fraud prevention, Platform security, responsible gaming monitoring, and improvement of services — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: For optional processing activities — specifically, direct marketing communications — kongph relies on your freely given, specific, and informed consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.
• Vital Interests: In rare circumstances, processing may be necessary to protect the vital interests of a data subject or other individuals — for example, where a Player has indicated distress related to problem gambling requiring urgent intervention.

kongph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances and only to the extent strictly necessary for each purpose:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, PESONet, and 7-Eleven receive transaction data necessary to process your deposits and withdrawals. These providers act as independent data controllers for their own services.
• Game Technology Providers: Licensed gaming software and live dealer technology providers who supply Games on the Platform may receive limited technical and gameplay data necessary to deliver and certify game outcomes.
• Identity Verification Services: Third-party KYC and AML service providers engaged by kongph to perform identity verification, document authentication, and sanctions screening receive identity data strictly for those verification purposes.
• PAGCOR and Regulatory Authorities: kongph is required by law to report certain information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities as required by applicable regulations. Such disclosures are mandatory and do not require your consent.
• Law Enforcement: kongph may disclose personal data to Philippine law enforcement agencies where required by valid legal process, court order, or subpoena.
• Professional Advisers: Lawyers, auditors, accountants, and other professional advisers retained by kongph may access personal data to the minimum extent necessary for the provision of their advisory services, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or transfer of substantially all of kongph's assets, your personal data may be transferred to the successor entity, subject to at least equivalent privacy protections and notification to you as required by the DPA.

All third parties with whom kongph shares personal data are required to process that data in a manner consistent with this Policy and in compliance with the Philippine Data Privacy Act. Where we engage third-party processors, we enter into appropriate data processing agreements that bind those processors to confidentiality and security obligations.

Some of kongph's technology partners and gaming software providers maintain servers and processing infrastructure outside the Philippines. Where personal data is transferred to recipients in countries that may not provide the same level of data protection as the Philippines, kongph ensures that such transfers are subject to appropriate safeguards, which may include:

• Contractual clauses that impose data protection obligations on the recipient equivalent to those required under the Philippine Data Privacy Act;
• Transfer to recipients located in countries that the National Privacy Commission has recognized as providing adequate levels of data protection; or
• Other safeguards as may be approved by the National Privacy Commission from time to time.

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting the Data Protection Officer at the address set out in Section 15.

kongph retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

Upon expiry of the applicable retention period, kongph will securely delete or anonymize your personal data in a manner that prevents reconstruction or identification. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical analysis without restriction.

kongph uses cookies, web beacons, pixel tags, and similar tracking technologies on the Platform to enhance functionality, improve security, and analyze user behavior. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in securely and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences, such as your preferred language, currency display (₱ PHP), and game lobby layout. Disabling these cookies may reduce personalization but will not prevent access to the Platform.
• Performance and Analytics Cookies: Collect anonymized or pseudonymized data about how users navigate the Platform, which pages are most visited, and where technical errors occur. This data is used exclusively to improve Platform performance for Filipino players.
• Marketing Cookies: Used only where you have provided explicit consent. These cookies track your interaction with promotional content on the Platform to help kongph deliver more relevant bonus offers and notifications to your Account.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data that kongph holds about you. These rights may be exercised by submitting a written request to our Data Protection Officer as described in Section 15.

kongph will respond to all verifiable data subject requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.

Please note that certain rights are subject to limitations under the DPA and other Philippine laws. For example, kongph may decline an erasure request where retention of the data is required by PAGCOR regulations or the Anti-Money Laundering Act. In such cases, we will clearly explain the basis for the limitation.

If you believe that your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

kongph implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• Encryption in Transit: All data transmitted between your device and the kongph Platform is encrypted using Transport Layer Security (TLS 1.2 or higher). You can verify this by the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive personal data — including identity documents, financial data, and KYC records — is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Personal data is accessible only to kongph personnel and authorized third-party processors who have a documented need to access it for a specific, declared purpose. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Network Security: The Platform infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments conducted by independent security firms.
• Data Breach Response: kongph maintains a documented Personal Data Breach Response Plan. In the event of a breach affecting sensitive personal information, we will notify affected data subjects and the National Privacy Commission within 72 hours of discovery, as required by the DPA.
• Staff Training: All kongph employees with access to personal data receive mandatory data privacy training upon onboarding and at regular intervals thereafter.

The kongph Platform is strictly intended for persons who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing casino-style online gaming. kongph does not knowingly collect personal data from individuals under 21 years of age.

If you are a parent or guardian and you believe that your child or ward has registered an Account or submitted personal data to kongph without your knowledge, please contact us immediately at [email protected]. Upon verification of the complaint, kongph will immediately suspend the Account, delete all associated personal data, and refund any deposits in accordance with PAGCOR guidelines.

kongph employs age verification technology during the registration process and reserves the right to request government-issued identification at any time to confirm that an Account holder meets the 21-year minimum age requirement.

kongph reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in Philippine data protection law, or updated PAGCOR regulatory requirements.

Where changes are material — meaning they affect the way we use your personal data in a manner that is less favorable to you, or they introduce new categories of data processing — we will provide advance notice of at least fourteen (14) calendar days before the change takes effect. Such notice will be delivered by email to your registered address or by a prominent banner notice on the Platform.

Non-material updates, such as clarifications of existing practices, corrections of typographical errors, or restructuring of the Policy for readability, may take effect immediately upon posting. The "Effective Date" displayed at the top of this Policy will always reflect the date of the most recent version.

We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any change constitutes your acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data that kongph holds about you, please contact our Data Protection Officer using the details below. All privacy-related correspondence must be in English or Filipino and must include your registered kongph Account username and a description of your inquiry.

If you are not satisfied with kongph's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC accepts complaints through its official government website and maintains a dedicated complaints handling process for data subjects whose rights under the DPA have been infringed.

This Privacy Policy constitutes the complete and authoritative statement of kongph's data privacy practices as of the Effective Date stated above, and supersedes all prior privacy notices or statements issued by kongph.