kuyaph
Privacy Policy

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for your personal information is the operator of the kuyaph online gaming platform, accessible at kuyaph.vip (hereinafter referred to as "kuyaph," "we," "us," or "our").

kuyaph's designated Data Protection Officer (DPO) is responsible for overseeing compliance with applicable data protection laws and for handling inquiries and requests from data subjects. The DPO may be contacted via the support channels described in Section 16 of this Policy.

This Privacy Policy applies to all personal information collected, used, processed, stored, or shared by kuyaph in connection with your use of the Platform, including but not limited to:

• Registration and account creation on kuyaph
• Deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and other payment channels
• Participation in casino games, sports betting, bingo, and other gaming activities on the Platform
• Customer support interactions via Live Chat and email
• Participation in kuyaph promotions, loyalty programs, or surveys
• Your browsing and interaction with the kuyaph website and any associated mobile interfaces

This Policy does not apply to third-party websites, applications, or services that may be linked from the Platform. Such third parties operate their own privacy policies, and kuyaph is not responsible for their data practices.

kuyaph collects personal data across several categories depending on how you interact with the Platform. The table below sets out the data categories, specific data types, and the purpose for which each is collected:

kuyaph collects personal data through the following methods:

4.1 Direct Collection

Information you provide directly to kuyaph, including:

• Data entered during account registration (name, mobile number, date of birth, address)
• Identity documents uploaded for KYC verification
• Payment details entered during deposit and withdrawal transactions
• Information provided in customer support communications
• Survey responses, feedback, or promotional entries

4.2 Automated Collection

Data collected automatically when you access and use the Platform, including:

• Device and browser information via standard web server logs
• IP address and approximate geographic location
• Session activity data, page views, and interaction events
• Cookies, pixel tags, and similar tracking technologies as described in Section 8

4.3 Third-Party Collection

Data received from authorized third parties in connection with service delivery, including:

• Payment processors (GCash, PayMaya, Instapay network) providing transaction confirmation and verification data
• Identity verification service providers processing KYC document submissions
• Fraud detection and AML screening service providers
• Game providers whose content is integrated into the kuyaph Platform, where applicable to session management

kuyaph processes personal data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Member Agreement, including operating your account, processing deposits and withdrawals, and enabling your participation in gaming activities.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulatory requirements, the Anti-Money Laundering Act (AMLA), identity and age verification obligations, and financial record-keeping mandates.
• Legitimate Interests: Processing carried out for kuyaph's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your specific, informed, and freely given consent, such as the sending of promotional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

kuyaph uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and administering your kuyaph Member Account, including verifying your identity and age, managing your login credentials, and processing account updates.
• Payment Processing: Processing deposits and withdrawal requests via your nominated payment methods, reconciling transactions, and maintaining accurate financial records.
• Regulatory Compliance: Fulfilling kuyaph's obligations under PAGCOR's online gaming regulations, the Anti-Money Laundering Act, the Data Privacy Act, and any other applicable Philippine law including mandatory record-keeping and reporting requirements.
• Fraud Prevention and Security: Detecting, investigating, and preventing unauthorized account access, fraudulent transactions, money laundering, collusion, and other prohibited conduct as defined in the kuyaph Terms and Conditions.
• Responsible Gaming: Monitoring gaming activity to identify patterns consistent with problem gambling, enforcing deposit and loss limits, processing self-exclusion requests, and complying with PAGCOR's responsible gaming requirements.
• Customer Support: Responding to inquiries, resolving disputes, investigating complaints, and maintaining communication records for quality assurance purposes.
• Service Improvement: Analyzing aggregated, anonymized usage data to improve Platform performance, user experience, game selection, and feature development.
• Marketing Communications: Sending promotional offers, bonus notifications, and gaming recommendations to Members who have consented to receive such communications, or to whom we have a legitimate interest basis to contact.

kuyaph does not sell, rent, or trade your personal data to any third party for their own commercial marketing purposes. We share personal data with third parties only in the following circumstances:

7.1 Service Providers

kuyaph engages third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include:

• Payment processors (GCash/Maya, BancNet Instapay network, USDT network operators)
• KYC and identity verification technology providers
• AML screening and fraud detection service providers
• Cloud infrastructure and data hosting providers operating in jurisdictions with adequate data protection standards
• Customer support platform providers

7.2 Game Providers

Game content integrated into the kuyaph Platform is provided by licensed third-party game developers. These providers may receive limited technical session data — such as a pseudonymous player identifier and bet value — necessary to operate the game functionality. Game providers are contractually prohibited from using this data for purposes beyond game operation.

7.3 Regulatory and Legal Disclosure

kuyaph may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement authorities, or courts of competent jurisdiction where required to do so by law, court order, or regulatory directive.

7.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of kuyaph's business, personal data held by kuyaph may be transferred to the acquiring entity, subject to the acquiring entity providing equivalent data protection to that described in this Policy. Members will be notified of any such transfer where required by law.

kuyaph uses cookies, pixel tags, local storage, and similar browser-based technologies to operate the Platform effectively and to improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core Platform functionality including session management, login authentication, and security. These cookies cannot be disabled without disabling the Platform itself.
• Performance and Analytics Cookies: Collect aggregated data on how Members interact with the Platform — which pages are visited, how long sessions last, and where errors occur. This data is used to improve Platform performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, game lobby display preferences, and responsible gaming notification settings between sessions.
• Marketing Cookies: Used to measure the effectiveness of kuyaph's promotional activities and to serve relevant offers within the Platform to Members who have consented to personalized marketing.

You may manage non-essential cookie preferences via your browser settings or the cookie preference center accessible on the Platform. Disabling strictly necessary cookies will impair your ability to use core Platform features including login and payment processing.

kuyaph implements a multi-layered data security program designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: All data transmitted between Member devices and kuyaph's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock indicator in your browser confirms this protection is active on every kuyaph page.
• Encryption at Rest: Sensitive personal data stored in kuyaph's systems, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized kuyaph personnel and service providers on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication for administrative systems.
• OTP Verification: Withdrawal requests and sensitive account changes require one-time password verification sent to the Member's registered Philippine mobile number, providing a second factor of identity confirmation.
• Security Monitoring: kuyaph's systems are monitored continuously for anomalous activity, unauthorized access attempts, and potential data breaches using automated detection tools and manual security review processes.
• Breach Response: kuyaph maintains a documented data breach response protocol. In the event of a personal data breach likely to result in risk to data subjects, kuyaph will notify the National Privacy Commission and affected Members in accordance with the timeframes required by the Data Privacy Act.

kuyaph retains personal data for the minimum period necessary to fulfill the purposes described in this Policy, subject to the following retention guidelines:

• Account Data: Retained for the duration of your active kuyaph membership and for a period of five (5) years following Account closure, in accordance with kuyaph's obligations under the Anti-Money Laundering Act of the Philippines.
• Financial and Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA reporting and record-keeping obligations.
• KYC Documents: Retained for the duration of the Member relationship and for a minimum of five (5) years following Account closure or the last transaction, whichever is later.
• Gaming Activity Logs: Retained for a minimum of two (2) years for responsible gaming monitoring, dispute resolution, and regulatory audit purposes.
• Customer Support Records: Retained for a minimum of two (2) years from the date of the last support interaction.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which marketing data is deleted or anonymized within 30 days.
• Technical Logs: Server and security logs retained for a maximum of 12 months, except where specific logs are required as evidence in connection with an active security investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard deletion protocols or anonymized so that it can no longer be associated with an identifiable individual.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights in respect of your personal data held by kuyaph. To exercise any of these rights, please contact kuyaph's Data Protection Officer via the contact methods in Section 16.

kuyaph implements age verification as a mandatory step prior to enabling real-money gaming and withdrawal features. If kuyaph becomes aware that personal data has been collected from a person under 21 years of age, the associated Account will be terminated immediately, all gaming activity will be voided, any deposited funds will be returned to the verified payment source, and the personal data will be deleted or anonymized in accordance with legal obligations.

Parents and guardians who believe a person under 21 has created a kuyaph Account are encouraged to contact kuyaph's support team immediately via Live Chat for expedited Account closure.

kuyaph primarily processes and stores personal data within the Philippines or in jurisdictions that the National Privacy Commission has recognized as providing adequate data protection standards. Where kuyaph engages service providers located outside the Philippines — such as cloud infrastructure providers or international KYC service providers — kuyaph ensures appropriate safeguards are in place through:

• Standard contractual clauses or data processing agreements that impose data protection obligations equivalent to those applicable in the Philippines
• Adequacy determinations by the National Privacy Commission or equivalent regulatory body
• Binding corporate rules where applicable to intra-group transfers

By using the kuyaph Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines where kuyaph's authorized service providers operate, subject to the safeguards described above.

The kuyaph Platform may contain references to or integrations with third-party services, such as game providers, payment processing interfaces, or promotional partners. kuyaph's Privacy Policy does not extend to any third-party websites, applications, or services that you may access through or in connection with the Platform.

kuyaph is not responsible for the privacy practices, data security measures, or content of any third-party service. When you interact with a third-party service — including when you use GCash or PayMaya to fund your kuyaph account — your use is governed by that third party's own terms of service and privacy policy. kuyaph encourages Members to review the privacy policies of any third-party services they use in connection with their kuyaph membership.

kuyaph reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or Platform features. The most current version of this Policy will always be available at kuyaph.vip/privacy-policy, with the effective date and last updated date indicated at the top of the document.

Where changes to this Policy are material — meaning they affect your rights or kuyaph's obligations in a significant way — kuyaph will provide advance notice via email to your registered address and/or via a prominent notification within the Platform, at least 14 days prior to the revised Policy taking effect.

Your continued use of the kuyaph Platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree to the revised Policy, you should discontinue use of the Platform and request Account closure in accordance with the Terms and Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or kuyaph's handling of your personal data, please contact kuyaph's Data Protection Officer using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, through the Live Chat interface on the kuyaph Platform. Live Chat is the fastest channel for urgent privacy-related requests, including account suspension requests.
• Email: [email protected] — For written data subject requests, please include your full name, registered mobile number, the nature of your request, and any supporting information. Please use the subject line "Data Privacy Request" to ensure prompt routing to the Data Protection Officer.

If you believe your data privacy rights have been violated and you are not satisfied with kuyaph's response to your complaint, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information about filing a complaint with the NPC can be found on the NPC's official website.