Privacy Policy

This Privacy Policy ("Policy") describes how fantasyph ("fantasyph," "we," "us," or "our") collects, processes, stores, and protects the personal information of users ("you," "Player," or "Data Subject") who access or use the fantasyph online gaming platform, including the website at fantasyph.app and any associated mobile applications.

fantasyph takes data privacy seriously. As an online gaming platform serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond, we understand that trust is the foundation of everything we do. This Policy is designed to be transparent, readable, and genuinely informative — not a wall of legal text designed to obscure what we actually do with your data.

By registering an account, accessing the fantasyph platform, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside the fantasyph Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of the platform.

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, fantasyph is the personal information controller responsible for the personal data collected through the fantasyph platform.

fantasyph operates within a PAGCOR-regulated framework. As a regulated gaming operator, fantasyph is subject to data handling obligations imposed not only by the Data Privacy Act but also by applicable PAGCOR regulations and anti-money laundering laws of the Philippines.

If you have any questions about how fantasyph handles your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer using the contact details provided in Section 14 of this Policy.

fantasyph collects the following categories of personal data from players and platform users:

fantasyph does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. Where sensitive data is collected (such as government ID numbers), it is handled with additional safeguards as described in Section 8 of this Policy.

fantasyph collects personal data through the following means:

• Direct Registration: When you create a fantasyph account, you provide identity, contact, and account credentials directly through the registration form.
• KYC Verification: When you submit identity documents to complete Know Your Customer verification, we collect and store copies of those documents and any associated data extracted from them.
• Financial Transactions: When you make a deposit or request a withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, or other accepted payment methods, we collect the transaction details necessary to process and record the payment.
• Platform Usage: As you use the fantasyph platform — browsing games, placing wagers, claiming bonuses — our systems automatically record your activity for regulatory, security, and responsible gaming purposes.
• Device and Technical Data: Our servers and analytics tools automatically collect technical information about the device and connection you use to access fantasyph, including IP address, browser type, and session data.
• Customer Support: When you contact our support team via live chat or email, we collect and retain records of those communications.
• Cookies and Tracking Technologies: fantasyph uses cookies and similar technologies as described in Section 9 of this Policy.

fantasyph processes your personal data only for specific, legitimate purposes. The table below outlines the primary purposes for which we process personal data and the legal basis for each:

Where fantasyph relies on your consent as the legal basis for processing (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

fantasyph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment Processors: We share financial data with payment service providers — including GCash, PayMaya, BPI, BDO, and Metrobank — to the extent necessary to process your transactions. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity Verification Providers: We engage third-party KYC and identity verification services to assist with document verification and age confirmation. These providers process your data solely on our behalf and under our instructions.
• Regulatory Authorities: fantasyph is required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities upon lawful request or as required by applicable regulations.
• Game Software Providers: Some game data may be shared with third-party game studios and software providers to the extent necessary to deliver and maintain game functionality. These providers do not receive your identity or financial data.
• IT and Security Service Providers: We engage trusted technology partners for hosting, cybersecurity, and platform maintenance. These partners access personal data only as necessary to perform their contracted services and are bound by strict confidentiality obligations.
• Legal and Compliance: We may disclose personal data where required by a court order, subpoena, or other lawful legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of fantasyph, our players, or the public.

fantasyph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with fantasyph, plus a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of the Philippines.
• KYC and Verification Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory authority.
• Gaming History: Game logs and wagering records are retained for a minimum of three (3) years for regulatory audit purposes.
• Support Communications: Customer support records are retained for two (2) years from the date of the last interaction.
• Marketing Data: Marketing preference records are retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

When personal data is no longer required and no legal retention obligation applies, fantasyph will securely delete or anonymize it in accordance with our internal data disposal procedures.

fantasyph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the fantasyph platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within fantasyph's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Secure Infrastructure: The fantasyph platform is hosted on secure, regularly audited infrastructure with firewalls, intrusion detection systems, and continuous security monitoring.
• Two-Factor Authentication: fantasyph supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of security.
• Vulnerability Management: fantasyph conducts regular security assessments and penetration testing to identify and remediate potential vulnerabilities in our platform.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, fantasyph will notify the National Privacy Commission (NPC) and affected data subjects in accordance with the requirements of the Data Privacy Act.

While fantasyph takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying fantasyph immediately if you suspect any unauthorized access to your account.

fantasyph uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following types of cookies are used on the fantasyph platform:

• Strictly Necessary Cookies: These cookies are essential for the fantasyph platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings and game display options — to provide a more personalized experience on fantasyph.
• Analytics Cookies: fantasyph uses analytics tools to understand how players interact with the platform, which pages are most visited, and where technical issues occur. This data is used in aggregate form to improve the platform and is not used to identify individual players.
• Security Cookies: These cookies help fantasyph detect and prevent fraudulent activity, unauthorized access attempts, and other security threats.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the fantasyph platform. fantasyph does not use third-party advertising cookies or share cookie data with advertising networks.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by fantasyph:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. fantasyph will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act. We may request proof of identity before processing your request to protect against unauthorized access to your data.

The fantasyph platform is strictly intended for adults aged 21 years and above, in compliance with Philippine gaming regulations. fantasyph does not knowingly collect personal data from individuals under the age of 21.

All registration applications are subject to age verification. Where fantasyph discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately, the account will be closed, and any funds associated with the account will be handled in accordance with applicable law.

If you are a parent or guardian and believe that a minor has registered on the fantasyph platform or provided personal data to us, please contact our Data Protection Officer immediately using the contact details in Section 14.

fantasyph primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where fantasyph engages technology service providers or game software partners based in other countries.

Where personal data is transferred outside the Philippines, fantasyph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include:

• Contractual clauses requiring the recipient to protect personal data to Philippine standards;
• Transfers to countries recognized by the National Privacy Commission as providing adequate data protection;
• Other legally recognized transfer mechanisms as permitted under RA 10173 and its Implementing Rules.

You may request further information about the safeguards in place for international data transfers by contacting our Data Protection Officer.

fantasyph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the fantasyph platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the fantasyph platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with the amended Policy, you should cease using the platform and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how fantasyph protects your personal information.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fantasyph handles your personal data, please contact our Data Protection Officer:

We aim to respond to all privacy-related inquiries within fifteen (15) business days. For complex requests, we may require up to thirty (30) days and will notify you if an extension is needed.

If you are not satisfied with fantasyph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

For general platform support, our customer support team is available 24/7 via live chat on the fantasyph platform. You may also reach general support at: