11php Privacy Policy

1. Introduction

11php ("we," "us," or "our") is committed to protecting the privacy and personal data of all players, visitors, and users of the 11php.vip online gaming platform ("Platform"). We recognize the trust you place in us when you share your personal information, and we take our obligations as a data controller seriously.

This Privacy Policy ("Policy") describes how 11php collects, uses, stores, shares, and protects personal data in connection with the Platform, in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its implementing rules and regulations as enforced by the National Privacy Commission of the Philippines ("NPC"). Where applicable, this Policy also reflects principles consistent with internationally recognized data protection frameworks.

By registering an account, depositing funds, or otherwise using the 11php Platform, you acknowledge that you have read, understood, and consent to the data processing activities described in this Policy.

2. Data Controller Information

The data controller responsible for your personal data in connection with the 11php Platform is the 11php operating entity. For all data privacy inquiries, requests, and complaints, players may contact the 11php Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

11php has appointed a Data Protection Officer in accordance with the requirements of the Philippine Data Privacy Act. The DPO is responsible for overseeing compliance with this Policy and applicable data protection laws, handling data subject rights requests, and serving as the primary point of contact with the National Privacy Commission.

3. Personal Data We Collect

3.1 Registration and Identity Data

When you register an account on the 11php Platform, we collect the following personal data:

• Full legal name (as it appears on a valid Philippine government-issued ID);
• Date of birth;
• Residential address (barangay, city/municipality, province, zip code);
• Active Philippine mobile number;
• Email address;
• Username chosen by the player;
• Password (stored in hashed, salted form — never in plaintext).

3.2 Identity Verification (KYC) Data

For the purposes of age verification, anti-money laundering (AML) compliance, and regulatory requirements, 11php may request and collect copies of the following documents:

• Government-issued photo identification (Philippine Passport, SSS ID, PhilHealth ID, Voter's ID, Driver's License, or UMID);
• Proof of address (utility bill, bank statement, or other official document showing your residential address, issued within the last three months);
• Proof of payment method (e.g., screenshot of GCash account showing your registered name and number);
• Source of funds declaration (for high-value players, as required by AML regulations).

3.3 Financial and Transaction Data

In connection with deposits, withdrawals, and wagering activity, 11php collects:

• Payment method identifiers (e.g., GCash mobile number, Maya account, BPI/BDO account number — limited to what is necessary for transaction processing);
• Transaction amounts, dates, and reference numbers;
• Account balance history;
• Wagering history, game participation records, and win/loss records.

3.4 Technical and Usage Data

When you access the 11php Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser type/version;
• Session duration, login timestamps, and navigation patterns on the Platform;
• Cookie identifiers and similar tracking technologies (see Section 9).

3.5 Communications Data

Records of all communications between you and 11php, including live chat transcripts, email correspondence, and support ticket records, are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

Data Category	Examples	Primary Purpose
Identity & Registration	Name, DOB, mobile number, address	Account creation, age/identity verification
KYC Documents	Government ID, proof of address	AML compliance, fraud prevention
Financial & Transaction	GCash number, deposit/withdrawal records	Payment processing, tax/AML reporting
Gaming Activity	Wager history, game sessions, win/loss	Platform operation, responsible gaming, dispute resolution
Technical/Usage	IP address, device info, cookies	Security, fraud detection, platform analytics
Communications	Live chat, email, support tickets	Customer support, dispute resolution, quality assurance

4. How We Use Your Personal Data

11php processes your personal data for the following purposes:

• Account creation and management: To register your 11php account, verify your identity and age, and maintain your account in accordance with our Terms & Conditions;
• Service delivery: To provide access to all games, betting services, promotions, and customer support features on the Platform;
• Payment processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other approved payment channels in Philippine Peso;
• Regulatory compliance: To fulfill our obligations under Philippine AML laws, PAGCOR-aligned regulations, tax reporting requirements, and any other applicable legal obligations;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other prohibited conduct;
• Responsible gaming: To monitor gaming behavior, flag potential indicators of problem gambling, and implement responsible gaming tools such as deposit limits and self-exclusion;
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — subject to your communication preferences and consent where required by law;
• Platform improvement: To analyze usage patterns, troubleshoot technical issues, and improve the design and functionality of the 11php Platform;
• Dispute resolution: To investigate and resolve player complaints and disputes.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, 11php processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 11php (i.e., providing the gaming and betting services you have registered to use);
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML obligations, PAGCOR regulatory requirements, and tax reporting;
• Legitimate interests: Processing necessary for 11php's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your fundamental rights and freedoms;
• Consent: Where no other legal basis applies — for example, in connection with optional marketing communications — we rely on your freely given, specific, informed, and unambiguous consent.

6. Data Sharing and Disclosure

11php does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of third parties strictly as necessary to operate the Platform and fulfill our legal obligations:

6.1 Payment Service Providers

To process deposits and withdrawals, 11php shares necessary transaction data with payment service providers including GCash (Mynt — Globe Fintech Innovations, Inc.), Maya (Voyager Innovations, Inc.), GrabPay, BPI, BDO, Metrobank, and InstaPay operators. These providers process your payment information in accordance with their own privacy policies and applicable Philippine financial regulations.

6.2 Game Software Providers

Some game providers require certain account identifiers to operate their game sessions. 11php shares the minimum necessary data (typically a pseudonymous player ID) with game software providers such as JILI, PG Soft, Evolution, Pragmatic Play, and Habanero to enable game functionality. These providers do not receive your full personal profile.

6.3 Fraud Prevention and Security Services

11php may share data with third-party fraud detection and cybersecurity service providers to identify and prevent fraudulent transactions, account takeovers, and other security threats. These providers operate under strict data processing agreements with 11php.

6.4 Regulatory and Legal Authorities

11php will disclose personal data to government authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and Philippine law enforcement agencies, where required to do so by law, court order, or legitimate regulatory request.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of 11php's assets, personal data held by 11php may be transferred to the acquiring entity, subject to the same privacy protections as described in this Policy.

7. International Data Transfers

Some of 11php's third-party service providers (including certain game software providers and cloud infrastructure partners) may be located outside the Philippines. Where personal data is transferred to countries that may not provide the same level of data protection as the Philippines, 11php implements appropriate safeguards — including contractual data protection clauses — to ensure that your personal data remains protected in accordance with the Philippine Data Privacy Act and this Policy.

11php will not transfer your personal data to jurisdictions that the National Privacy Commission has determined provide inadequate data protection without first obtaining your explicit consent or implementing additional protective measures.

8. Data Retention

11php retains personal data for as long as is necessary to fulfill the purposes described in this Policy, and in any event for a minimum of five (5) years following the closure of your account or the conclusion of any transaction or dispute, in compliance with the record-keeping requirements of Philippine AML regulations and tax laws.

Specific retention periods by data category:

• Account and identity data: Duration of account plus 5 years post-closure;
• KYC documents: Duration of account plus 5 years post-closure;
• Financial transaction records: Minimum 5 years from transaction date, as required by AML regulations;
• Gaming activity records: Minimum 3 years from date of activity;
• Customer support communications: 2 years from the date of the communication;
• Marketing consent records: Duration of consent plus 1 year following withdrawal of consent.

Upon expiry of the applicable retention period, 11php will securely delete or anonymize your personal data in accordance with best practices for data disposal.

9. Cookies and Tracking Technologies

The 11php Platform uses cookies and similar tracking technologies to operate effectively and provide a personalized experience. The types of cookies used by 11php are as follows:

• Essential cookies: Strictly necessary for the Platform to function, including session management, login state maintenance, and security functions. These cannot be disabled without disrupting Platform functionality.
• Functional cookies: Remember your preferences (such as language settings and display preferences) to provide a more personalized experience on return visits.
• Analytics cookies: Collect anonymized data about how players navigate and use the Platform, helping 11php identify areas for improvement. No personal gaming data is included in analytics reporting.
• Security cookies: Used to detect fraudulent behavior, protect against bot activity, and verify the integrity of sessions.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to refuse non-essential cookies, delete existing cookies, and receive notifications when new cookies are set. Note that disabling certain cookies may affect the functionality of the 11php Platform. 11php does not use third-party advertising cookies or sell data to advertising networks.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 11php:

• Right to be informed: The right to be informed that your personal data is being collected and processed, and to receive clear information about how it is used — as provided in this Policy;
• Right of access: The right to obtain a copy of the personal data 11php holds about you, including information about how it is processed;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by 11php;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 11php's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on 11php's legitimate interests;
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that 11php has processed your personal data in breach of the Data Privacy Act.

To exercise any of these rights, please contact the 11php Data Protection Officer using the details in Section 15. 11php will respond to all data subject requests within thirty (30) days of receipt. Complex requests may require additional time, in which case you will be notified of the expected response timeline.

11. Security Measures

11php implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• Encryption in transit: All data transmitted between your device and 11php servers is encrypted using 256-bit SSL/TLS encryption — the same standard used by Philippine commercial banks;
• Encryption at rest: Sensitive personal and financial data stored on 11php systems is encrypted at rest using AES-256 encryption;
• Access controls: Access to personal data is restricted to authorized 11php personnel on a strict need-to-know basis, controlled through role-based access management systems;
• Password security: Player passwords are never stored in plaintext. All passwords are hashed using bcrypt with per-user salting;
• Two-factor authentication: 11php offers optional two-factor authentication (2FA) via SMS OTP for all player accounts, and requires it for internal staff accessing player data systems;
• Regular security audits: 11php conducts regular vulnerability assessments and penetration testing of its Platform infrastructure;
• Incident response: 11php maintains a documented data breach response plan. In the event of a personal data breach that is likely to result in risk to data subjects, 11php will notify the National Privacy Commission and affected players within 72 hours of becoming aware of the breach, as required by the DPA.

Notwithstanding these measures, no online platform can guarantee absolute security. Players are advised to use strong, unique passwords for their 11php accounts, enable two-factor authentication, and report any suspected unauthorized access to their accounts immediately.

12. Children's Privacy and Age Restriction

The 11php Platform is strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with Philippine gambling regulations. 11php does not knowingly collect or process the personal data of individuals below this age.

If you believe a minor has accessed the 11php Platform and created an account, please contact 11php support immediately so that appropriate action can be taken.

13. Third-Party Links

The 11php Platform may contain links to third-party websites or services (for example, payment provider portals for GCash or Maya). 11php is not responsible for the privacy practices of these third-party services. We strongly encourage players to review the privacy policies of any third-party service they access in connection with their use of the 11php Platform. This Policy applies only to data processed by 11php in connection with the 11php.vip Platform.

14. Changes to This Privacy Policy

11php reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory guidance. Material changes to this Policy will be communicated to registered players via the email address associated with their 11php account and/or via a prominent notice on the Platform.

The "Last updated" date at the top of this Policy will be revised whenever a material change is made. We encourage players to review this Policy periodically to stay informed about how 11php handles their personal data. Continued use of the 11php Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

15. Contact the Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 11php, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that 11php has processed your personal data in a manner that violates the Data Privacy Act of 2012. Information about how to file a complaint with the NPC is available on the NPC's official website.