kengph Privacy Policy
At kengph, your personal information is handled with the same care and respect we bring to every aspect of the gaming experience. This Privacy Policy explains exactly what data we collect, why we collect it, how we protect it, and the rights you hold as a Filipino player on our platform.
How kengph Treats Your Personal Data
Before you dive into the full legal text, here is a plain-language summary of the six core commitments kengph makes to every player regarding their personal information.
Data Protection by Design
Privacy is built into the kengph platform from the ground up — not bolted on afterward. We apply encryption, access controls, and data minimisation principles across every layer of our systems so that your personal information is protected at rest and in transit at all times.
Philippines Data Privacy Act Compliant
kengph operates in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations as overseen by the National Privacy Commission (NPC) of the Philippines. Your data rights as a Filipino citizen are fully recognised and upheld.
No Selling of Personal Data
kengph does not sell, rent, or trade your personal information to third-party marketers, data brokers, or any commercial entities for their own independent use. When we share data with service providers, it is strictly to operate and improve the kengph platform on your behalf.
Purpose Limitation
Every piece of data kengph collects is collected for a specific, clearly stated purpose. We do not repurpose your data for activities beyond what is disclosed in this Privacy Policy without first obtaining your explicit consent or as required by law.
You Control Your Data
kengph gives every registered player meaningful control over their personal information. You can access, correct, update, or request deletion of your data at any time by contacting our support team. We process all data subject requests within the timeframes required by Philippine law.
Secure Payment Data Handling
kengph does not store full payment card details or complete GCash/PayMaya account credentials on our servers. Payment transactions are processed through PCI-DSS compliant payment gateways. We retain only the minimum tokenised reference data necessary to process refunds and verify ownership.
Contents
- 1. About This Policy
- 2. Data Controller
- 3. Information We Collect
- 4. How We Use Your Data
- 5. Legal Basis for Processing
- 6. Sharing Your Data
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Your Rights
- 10. Data Security
- 11. Children & Minors
- 12. Third-Party Services
- 13. Cross-Border Transfers
- 14. Policy Amendments
- 15. Contact & Complaints
About This Policy
This Privacy Policy describes how kengph ("kengph", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "Player", "Data Subject") who access or use the kengph online gaming platform at kengph.net, including all associated mobile-optimised interfaces, game products, and support channels.
This Policy is issued in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). Where kengph is also subject to additional regulatory requirements from PAGCOR as a licensed online gaming operator, those requirements are incorporated into our data handling practices.
By registering an account on kengph, placing a wager, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein. If you do not agree, please discontinue use of the Platform.
Data Controller
For the purposes of the Data Privacy Act of 2012, kengph acts as the Personal Information Controller in respect of all personal data collected through the Platform. This means kengph determines the purposes for which and the means by which your personal data is processed.
Certain third-party service providers engaged by kengph — such as payment processors, identity verification providers, and game content suppliers — act as Personal Information Processors when handling data on our behalf. These processors are bound by contractual data processing agreements that require them to handle your data only as instructed by kengph and in compliance with the DPA.
All data subject rights requests, privacy inquiries, and complaints relating to kengph's processing of your personal data should be directed to:
Email: [email protected] (Subject line: "Data Privacy Request")
Platform: kengph.net
Response time: Within 15 business days of receipt of a verified request, as required under the DPA IRR.
Information We Collect
kengph collects personal information from you through several channels: directly from you when you register or use the Platform, automatically through your use of our technology, and in limited circumstances from third parties such as identity verification services and payment processors.
Information You Provide Directly:
| Category | Examples of Data Collected | When Collected |
|---|---|---|
| Registration Data | Full legal name, date of birth, gender, Philippine residential address, email address, mobile number | Account registration |
| Identity Verification (KYC) | Government-issued Philippine ID (PhilSys, passport, driver's license, SSS/GSIS card), selfie or liveness check image, proof of address documents | KYC verification process |
| Financial Data | GCash or PayMaya account reference, bank account name and number (BPI, BDO, Metrobank), deposit and withdrawal history, transaction references | Deposits, withdrawals, payment verification |
| Support Communications | Messages, emails, chat logs, complaint details, attachments submitted to kengph support | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, cooling-off preferences, session time configurations | Responsible gaming tool usage |
Information Collected Automatically:
| Category | Examples of Data Collected |
|---|---|
| Device & Technical Data | IP address, device type, operating system, browser type and version, screen resolution, device identifiers |
| Usage & Behavioural Data | Pages visited, games played, session duration, bet amounts, game outcomes, feature interactions, navigation paths |
| Location Data | Approximate geolocation derived from IP address (used to verify Philippine jurisdiction compliance) |
| Cookie & Tracking Data | Session cookies, preference cookies, analytics identifiers — see Section 7 for full details |
How We Use Your Data
kengph uses personal information collected from Players for the following specific purposes:
- Account Management: To create, maintain, verify, and manage your kengph account, including processing login authentication, password resets, and two-factor authentication via your registered Philippine mobile number.
- Service Delivery: To provide you with access to sabong betting, live casino games, slots, bingo, sports betting, and all other kengph gaming products and features.
- Identity Verification and KYC Compliance: To verify your identity, age (21+), and Philippine residency as required by PAGCOR regulations and kengph's obligations under Philippine anti-money laundering laws.
- Payment Processing: To process deposits from and withdrawals to your verified GCash, PayMaya, BPI, BDO, or Metrobank accounts, and to maintain a financial transaction record for regulatory and dispute resolution purposes.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, bonus abuse, and other prohibited conduct as defined in the kengph Terms & Conditions.
- Regulatory Compliance: To fulfil kengph's obligations to PAGCOR and other Philippine regulatory authorities, including maintaining records as required by the Anti-Money Laundering Act (AMLA) and related laws.
- Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, to apply Player-requested limits and exclusions, and to fulfil kengph's duty of care obligations under PAGCOR's responsible gaming framework.
- Customer Support: To respond to your inquiries, resolve complaints, and maintain a support history to improve service quality.
- Marketing Communications: To send you promotional offers, bonus alerts, and platform updates via email or SMS — but only where you have provided consent, and subject to your right to withdraw consent at any time.
- Platform Improvement: To analyse aggregated, de-identified usage data to improve the design, performance, and content of the kengph platform.
Legal Basis for Processing
Under the Data Privacy Act of 2012, kengph must have a lawful basis for each type of personal data processing it carries out. The following table sets out the legal bases applicable to kengph's primary processing activities:
| Processing Purpose | Legal Basis (DPA Section 12 / 13) |
|---|---|
| Account registration and management | Performance of a contract (Sec. 12[b]) |
| Identity verification and KYC | Compliance with a legal obligation (Sec. 12[c]); legitimate interests (Sec. 12[f]) |
| Payment processing | Performance of a contract (Sec. 12[b]) |
| Fraud prevention and AML monitoring | Compliance with a legal obligation (Sec. 12[c]); legitimate interests (Sec. 12[f]) |
| Responsible gaming monitoring | Compliance with a legal obligation (Sec. 12[c]); protection of vital interests (Sec. 12[e]) |
| Marketing communications | Consent (Sec. 12[a]) |
| Platform analytics and improvement | Legitimate interests (Sec. 12[f]) — using de-identified/aggregated data only |
| Regulatory reporting to PAGCOR/AMLC | Compliance with a legal obligation (Sec. 12[c]) |
For processing of sensitive personal information — such as government ID data collected during KYC — kengph relies on Section 13(a) of the DPA (explicit consent) and Section 13(b) (exchange, exercise, or defence of legal claims and in the lawful activities of non-profit organisations).
Sharing Your Data
kengph does not sell your personal information. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose:
- Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and their respective payment gateway providers receive transaction data necessary to process your deposits and withdrawals. These providers are subject to their own regulatory obligations and privacy policies.
- Identity Verification Providers: kengph engages third-party KYC and liveness verification providers to assist with identity document verification. These processors handle identity data solely as instructed by kengph under data processing agreements.
- Game Content Providers: Third-party game studios and live casino operators whose games are available on the kengph platform may receive a session token and limited account reference data necessary to launch and authenticate a game session. They do not receive your full personal profile.
- Regulatory Authorities: kengph discloses player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities when required to do so by law, regulation, court order, or regulator directive.
- Professional Advisers: kengph may share data with its legal counsel, auditors, and other professional advisers on a strictly confidential basis where necessary for the operation and legal compliance of the business.
- Business Transfers: In the event of a merger, acquisition, or sale of kengph's business or assets, player personal data may be transferred to the acquiring entity, subject to equivalent privacy protections and notification to affected Players as required by the DPA.
Cookies & Tracking Technologies
kengph uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyse how the Platform is used. A cookie is a small text file stored on your device by your browser when you visit the kengph website.
Types of Cookies We Use:
- Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core functionality such as login session management, security token validation, and navigation. These cookies cannot be disabled without breaking basic Platform functionality.
- Preference Cookies: These cookies remember your settings and preferences, such as your selected language, display options, and responsible gaming configurations, so you do not have to re-enter them on each visit.
- Analytics Cookies: kengph uses privacy-respecting analytics tools to collect aggregated, de-identified data about how Players navigate and use the Platform. This data is used solely to improve Platform performance and user experience.
- Security Cookies: These cookies assist in fraud detection and account security by identifying unusual access patterns, multiple simultaneous sessions, or suspicious device fingerprint changes.
kengph does not use third-party advertising cookies or retargeting pixels that would allow external advertisers to track your behaviour across other websites. Your on-platform activity data is not shared with ad networks.
Data Retention
kengph retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | PAGCOR regulatory requirements; DPA legitimate interests |
| KYC and identity documents | Duration of account + 5 years after closure | AMLA compliance; PAGCOR requirements |
| Financial transaction records | Minimum 5 years from transaction date | Anti-Money Laundering Act (RA 9160 as amended) |
| Game play and wagering history | 5 years from date of activity | PAGCOR audit requirements; dispute resolution |
| Customer support records | 3 years from date of interaction | Legitimate interests; legal claims period |
| Marketing consent records | Until consent is withdrawn + 1 year | DPA consent accountability requirement |
| Cookies and analytics data | Up to 13 months from collection | Platform improvement; de-identified after 13 months |
Following the expiry of the applicable retention period, kengph will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual.
Your Data Rights
Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by kengph. You may exercise any of these rights by contacting our Data Privacy Officer at [email protected] with the subject line "Data Privacy Request".
Right to Access
You have the right to request a copy of the personal information kengph holds about you, along with information on how it is being used and with whom it has been shared.
Right to Rectification
If any personal information kengph holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to kengph's legal retention obligations.
Right to Object
You have the right to object to kengph's processing of your personal data where that processing is based on legitimate interests, including objecting to direct marketing at any time.
Right to Data Portability
You may request your personal data in a structured, commonly used, machine-readable format for transfer to another platform where technically feasible.
Right to Be Informed of a Breach
If a personal data breach occurs that is likely to result in serious harm to you, kengph will notify you and the NPC within 72 hours of becoming aware of the breach, as required by the DPA.
Data Security
kengph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- Encryption in Transit: All data transmitted between your device and the kengph platform is encrypted using TLS 1.2 or higher. HTTPS is enforced across all kengph web properties.
- Encryption at Rest: Sensitive personal data stored in kengph databases — including government ID data, payment references, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. kengph staff are granted access only to the data necessary for their specific role, and all access is logged and auditable.
- Two-Factor Authentication: kengph enforces two-factor authentication for all player accounts via registered Philippine mobile numbers, significantly reducing the risk of account takeover even in the event of password compromise.
- Regular Security Testing: kengph conducts periodic vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses before they can be exploited.
- Incident Response: kengph maintains a documented data breach response procedure. In the event of a breach affecting player data, the response procedure includes immediate containment, impact assessment, notification to the NPC, and notification to affected Players as required by the DPA.
While kengph takes all reasonable steps to protect your data, no system is completely immune to security risks. You play a role in keeping your account secure — please review Section 5 of the kengph Terms & Conditions for your account security responsibilities.
Children & Minors
The kengph platform is strictly intended for individuals who are 21 years of age and above, in accordance with PAGCOR's minimum age requirements for online gaming in the Philippines. kengph does not knowingly collect, store, or process the personal information of any individual under the age of 21.
Age verification is performed as part of the mandatory KYC process for all registered accounts. Where kengph discovers or reasonably suspects that a registered account belongs to an individual under the age of 21, the account will be immediately suspended, all real-money activity will be reversed to the extent possible, and the matter will be handled in accordance with PAGCOR's underage gambling protocols.
Third-Party Services
The kengph platform integrates with third-party service providers to deliver certain features and functions. These include game content providers, payment gateways, identity verification services, and customer support tools. While kengph selects third-party processors carefully and requires them to comply with the DPA through contractual obligations, each third party operates under its own privacy policy for data it independently controls.
kengph is not responsible for the privacy practices of third-party services that you access independently outside the kengph platform, including the websites or applications of GCash, PayMaya, BPI, BDO, or Metrobank. We encourage you to review the privacy policies of any third-party services you use in connection with your kengph account.
The kengph platform does not contain links to external websites for commercial or advertising purposes. Any external services referenced in this Policy are mentioned for informational and compliance context only.
Cross-Border Data Transfers
kengph's primary data processing infrastructure is located within the Philippines. In certain circumstances, however, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where a game content provider or technology partner operates infrastructure in another jurisdiction.
Where such cross-border transfers occur, kengph ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012 and the NPC's guidelines on cross-border data flows. These safeguards include:
- Binding contractual obligations requiring recipient processors to apply data protection standards equivalent to those required by Philippine law.
- Transfer impact assessments to evaluate the privacy risks of transferring data to specific jurisdictions.
- Where required by the NPC, notification or approval prior to executing cross-border transfer arrangements involving sensitive personal information.
Your personal data will never be transferred to a jurisdiction where kengph cannot ensure an adequate level of protection equivalent to that afforded under the DPA.
Policy Amendments
kengph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. All amendments will be posted on this page with a revised "Last Updated" date at the top of the Policy.
Where amendments are material — meaning they significantly affect your rights or the way kengph processes your personal data — kengph will provide notice through one or more of the following channels: a prominent notice on the kengph platform upon your next login, an email notification to your registered address, or an SMS to your registered Philippine mobile number.
Your continued use of the kengph platform following the effective date of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the amended Policy, you should discontinue use of the Platform and may request account closure and deletion of your data in accordance with Section 9 of this Policy, subject to kengph's legal retention obligations.
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or kengph's processing of your personal data, please contact our Data Privacy Officer:
Email: [email protected] — Subject line: "Data Privacy Request"
Available: Monday to Friday, 9:00 AM – 6:00 PM Philippine Standard Time (PST)
Response: Within 15 business days of receipt of a verified request
If you are not satisfied with kengph's response to your data privacy concern, or if you believe kengph has violated your rights under the Data Privacy Act of 2012, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory authority responsible for administering and enforcing the DPA.
The NPC accepts complaints from data subjects whose rights under RA 10173 have been violated. For guidance on filing a complaint, visit the NPC's official government website at privacy.gov.ph (external — not affiliated with kengph). kengph fully cooperates with all NPC investigations and inquiries.
Play at kengph With Confidence
Your privacy and security are foundational to how kengph operates. Join thousands of Filipino players who enjoy sabong, live casino, slots, and sports betting on a platform that takes data protection seriously.
21+ only. Please gamble responsibly. kengph supports PAGCOR's responsible gaming framework.