slostph Privacy Policy

1.1  slostph is a Philippines-focused online gaming and sports betting platform operating at slostph.net. We are committed to protecting the privacy and personal data of every player and visitor who interacts with our Platform. This Privacy Policy has been prepared in accordance with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and the guidelines issued by the National Privacy Commission ("NPC").

1.2  As a data controller, slostph determines the purposes and means by which your personal data is processed. We take this responsibility seriously. Our Data Protection Officer ("DPO") oversees all data processing activities on the Platform and can be reached at [email protected] for privacy-related inquiries.

1.3  This Privacy Policy applies to all personal data collected from players and visitors through the slostph website, any related mobile interface, customer support channels, and promotional activities. It does not apply to third-party websites or services that may be linked from our Platform — those are governed by their own privacy policies.

1.4  By registering an Account, depositing funds, or otherwise using the slostph Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you must discontinue use of the Platform.

2.1  slostph collects personal data in several ways: directly from you when you register, deposit, or contact support; automatically through your use of the Platform (e.g., device and browsing data); and from third parties such as KYC verification providers and payment processors. The following table summarises the categories of personal data we collect and the circumstances in which they arise:

2.2  Sensitive Personal Information. Under the DPA, government-issued ID numbers, financial account details, and certain other data points are classified as sensitive personal information ("SPI"). slostph processes SPI only to the extent strictly necessary for identity verification, payment processing, and regulatory compliance. SPI is subject to enhanced access controls and is not used for marketing purposes.

2.3  Data You Provide Voluntarily. When you contact our support team via live chat or email, participate in promotions, or complete surveys, you may voluntarily provide additional personal data beyond what is required for account operation. This data is processed only for the purpose for which you provided it.

3.1  slostph uses your personal data only for the purposes described in this Privacy Policy. We do not process your data in ways that are incompatible with these stated purposes. The primary purposes for which we process your personal data are as follows:

• Account Management: Creating, verifying, operating, and maintaining your slostph Player Account, including authentication of your identity at login and enforcement of the one-account-per-player policy.
• KYC and Compliance: Verifying your identity and age (21+) to satisfy PAGCOR regulatory requirements, anti-money laundering obligations under the Anti-Money Laundering Act of 2001 as amended (AMLA), and counter-terrorism financing requirements.
• Payment Processing: Executing deposits, withdrawals, and refunds to and from your registered payment methods including GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard.
• Game Service Delivery: Operating slot games, live dealer tables, bingo, sports betting (PBA, NBA, UFC, boxing, football), and all other Platform services you access.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and administering self-exclusion, deposit limits, cool-off periods, and other responsible gaming tools in accordance with PAGCOR responsible gaming guidelines.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct.
• Customer Support: Responding to your support inquiries, resolving complaints, and improving the quality of our support services.
• Marketing Communications: Sending you information about promotions, bonuses, new games, and Platform updates — but only where you have given us explicit consent or where we have a legitimate interest in doing so, and always with an easy opt-out mechanism.
• Platform Improvement: Analysing aggregated usage data and game performance metrics to improve the slostph Platform, fix bugs, and develop new features.
• Legal Obligations: Fulfilling reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities as required by law.

3.2  slostph does not use automated decision-making or profiling in ways that produce legal or similarly significant effects on you without human oversight. Where automated systems flag accounts for review (e.g., for fraud or responsible gaming purposes), the final decision is reviewed by a trained compliance team member.

4.1  Under the Philippine Data Privacy Act of 2012, slostph processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to operate your Account, process your transactions, and deliver the gaming services you have requested. Without this processing, we cannot provide the Platform service.
• Legal Obligation: Processing is required to comply with applicable Philippine law, including PAGCOR regulations, AMLA obligations, the DPA itself, and any lawful order from a competent regulatory authority or court.
• Consent: For marketing communications and optional data uses (such as participation in surveys or promotional data sharing with partner brands), we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate Interests: For fraud prevention, Platform security, and internal analytics, we process data on the basis of our legitimate interests — provided that those interests are not overridden by your fundamental rights and freedoms. We conduct a balancing assessment for each legitimate-interest processing activity.

4.2  For sensitive personal information as defined under Section 3(l) of the DPA, slostph relies on the specific bases permitted by the DPA's IRR, including processing necessary for compliance with a legal obligation, processing pursuant to a contract, and where you have expressly consented to the processing of your SPI.

5.1  slostph shares your personal data only to the extent necessary for the purposes described in this Privacy Policy. We never sell, rent, or trade your personal data to commercial third parties for their own marketing purposes. The third parties with whom we share data, and the basis for sharing, are as follows:

• KYC and Identity Verification Providers: We share identity data (name, date of birth, government ID details) with licensed KYC service providers to verify your identity in accordance with PAGCOR and AMLA requirements. These providers are bound by data processing agreements and may only use your data for verification purposes.
• Payment Processors: Financial data necessary to process your GCash, PayMaya, BPI, BDO, Metrobank, Visa, or Mastercard transactions is shared with the respective payment service providers. Card data is handled by PCI-DSS Level 1 certified processors; slostph does not store full card numbers on our own systems.
• Game Software Providers: To operate certain game titles, your Player ID and session data may be shared with third-party game software providers (e.g., slot game studios, live dealer operators). These providers process data only as technical service providers under our instructions.
• Regulatory Authorities: PAGCOR, the AMLC, the NPC, and other competent Philippine government agencies may receive your data where we are legally required to report, including suspicious transaction reports required under AMLA.
• Law Enforcement: We will disclose personal data to law enforcement authorities in the Philippines in response to lawful requests, court orders, or subpoenas, or where we believe disclosure is necessary to prevent imminent harm or criminal activity.
• Professional Advisers: Our legal counsel, auditors, and compliance consultants may access limited personal data as strictly necessary to provide professional services to slostph, and are bound by confidentiality obligations.

5.2  All third-party service providers who process personal data on our behalf are subject to written data processing agreements that require them to: (a) process data only on our documented instructions; (b) maintain appropriate security measures; (c) not sub-process data without our prior written consent; and (d) assist us in responding to data subject rights requests.

6.1  slostph uses cookies and similar tracking technologies (including local storage objects and session tokens) on the Platform. These technologies serve essential operational functions as well as optional analytics and personalisation purposes. The categories of cookies we use are:

• Strictly Necessary Cookies: These are essential for the Platform to function. They include session cookies that maintain your login state, security tokens that protect against CSRF attacks, and cookies that enforce your responsible gaming settings (such as active self-exclusion status). These cookies cannot be disabled without rendering the Platform inoperable.
• Functional Cookies: These remember your preferences such as language settings, game view options, and notification preferences. They improve your experience but are not strictly required for basic Platform operation.
• Analytics Cookies: We use privacy-respecting analytics tools to understand how players navigate the Platform, which game categories are most popular, and where technical friction occurs. Analytics data is aggregated and does not identify you individually. You may opt out of analytics cookies via our cookie preferences panel.
• Security and Anti-Fraud Cookies: These help us identify unusual login patterns, detect account takeover attempts, and flag potentially fraudulent transactions by building a non-personal device fingerprint that is compared against your registered session baseline.

6.2  Most web browsers allow you to control cookie settings through the browser's settings menu. You can set your browser to refuse all cookies, to alert you when cookies are being set, or to delete cookies after each session. However, disabling strictly necessary cookies will prevent you from logging into your slostph Account and using the Platform's core features.

6.3  slostph does not use third-party advertising cookies or cross-site tracking technologies for targeted advertising purposes.

7.1  slostph retains your personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal obligations under PAGCOR regulations and Philippine anti-money laundering law. The following retention schedule applies:

7.2  Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for aggregate statistical and platform improvement purposes.

7.3  Where you request deletion of your personal data before the end of a retention period, we will action your request to the extent permitted by law. Data subject to mandatory PAGCOR or AMLA retention requirements cannot be deleted until the mandatory retention period has elapsed.

8.1  slostph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security programme includes:

• Encryption: All data in transit is protected by TLS 1.3. All personal data at rest is encrypted using AES-256. Database fields containing particularly sensitive data (government ID numbers, payment references) are subject to field-level encryption with key management handled by a dedicated secrets management system.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. Staff access is controlled via role-based access control ("RBAC"), multi-factor authentication is mandatory for all internal system access, and all access events are logged and monitored.
• Network Security: The slostph Platform is protected by web application firewall ("WAF") technology, DDoS mitigation services, and intrusion detection systems. Regular penetration testing is conducted by qualified third-party security professionals.
• Incident Response: slostph maintains a documented personal data breach response procedure. In the event of a breach that is likely to result in risk to your rights, we will notify the NPC and affected players within the timeframes required by the DPA's IRR.
• Staff Training: All slostph employees and contractors who handle personal data undergo mandatory data privacy and security training upon onboarding and annually thereafter.

8.2  While slostph takes all reasonable steps to protect your personal data, no internet-based system can be guaranteed completely secure. You also have a role to play in keeping your Account secure — please use a strong, unique password for your slostph Account and never share your login credentials with anyone.

9.1  As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by slostph. You may exercise any of these rights by submitting a written request to our DPO at [email protected] with the subject line "Data Subject Rights Request".

9.2  slostph will respond to verified data subject rights requests within fifteen (15) calendar days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further fifteen (15) calendar days with written notice to you explaining the reason for the delay. Responses to rights requests are provided free of charge unless requests are manifestly unfounded or excessive.

9.3  To protect your privacy and prevent unauthorised access to your data by third parties, we will verify your identity before processing any data subject rights request. Verification may require you to confirm account details, provide your registered email address, or complete a secondary authentication step.

10.1  The slostph Platform is strictly restricted to individuals who are at least twenty-one (21) years of age, in accordance with PAGCOR regulations governing casino-style online gaming in the Philippines. slostph does not knowingly collect personal data from individuals under the age of 21.

10.2  All new Account registrations are subject to age verification as part of our KY C process. We require submission of a government-issued ID that confirms date of birth before any deposit or wagering activity is permitted. Accounts where age verification has not been completed are restricted from accessing real-money features of the Platform.

10.3  If slostph becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant Account, delete the associated personal data to the extent permitted by PAGCOR and AMLA record-keeping requirements, and report the incident to the relevant regulatory authority where required.

10.4  Parents and guardians who believe that a minor may have registered an Account on the slostph Platform are encouraged to contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11.1  Some of slostph's service providers and technology partners are located outside the Philippines. Where personal data is transferred to a country outside the Philippines, slostph ensures that such transfers are subject to appropriate safeguards consistent with the requirements of the DPA and the NPC's guidelines on cross-border data flows.

11.2  Safeguards we rely on for cross-border transfers include: (a) contractual clauses that impose DPA-equivalent data protection obligations on the recipient; (b) transfers to jurisdictions that the NPC has recognised as providing adequate levels of data protection; and (c) binding corporate rules where the recipient is a member of the same corporate group as slostph.

11.3  You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting our DPO at [email protected].

12.1  slostph reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory guidance, or business operations. The "Last Updated" date at the top of this policy indicates when the most recent revision was made.

12.2  Where a change to this Privacy Policy is material — meaning it significantly affects your rights or the way we process your personal data — slostph will notify you by email to your registered address and by a prominent notice on the Platform login screen at least fourteen (14) days before the change takes effect. Continued use of the Platform after the effective date of a material change constitutes acceptance of the revised policy.

12.3  For non-material changes (such as clarifications of existing provisions, corrections of typographical errors, or reorganisation of section structure without substantive content change), slostph may update the policy without prior notice, though the "Last Updated" date will always be updated to reflect the revision.

12.4  We recommend that you review this Privacy Policy periodically to stay informed about how slostph protects your personal data. The current version of the Privacy Policy is always available at slostph.net/privacy-policy.

13.1  slostph has appointed a Data Protection Officer ("DPO") in accordance with Section 21 of the DPA's IRR. The DPO is responsible for overseeing slostph's compliance with the DPA, serving as the primary point of contact for the NPC, and handling data subject rights requests and privacy inquiries from players.

13.2  If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by slostph, please contact our DPO using the following details:

13.3  If you are not satisfied with our response to your privacy inquiry or data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about how to file a complaint with the NPC is available on the NPC's official website.

13.4  For general support inquiries unrelated to data privacy — such as account assistance, deposit or withdrawal issues, or game-related questions — please also contact us at [email protected] and our support team will assist you.