🔐 Privacy Policy

1. Overview

x0play takes the privacy and security of your personal data seriously. As the Philippines' trusted online casino and sports betting platform, we handle sensitive personal and financial information on behalf of our players every day. This Policy is designed to be transparent about our data practices so that every Filipino player can make an informed decision about using x0play.

This Policy applies to all personal data collected through the x0play website, mobile platform, customer support channels, and any other touchpoints through which you interact with x0play. It applies to registered players, prospective players, and visitors to the x0play website.

2. Personal Data We Collect

2.1 Registration Data

When you create an x0play account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (city, province, country)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

As required by PAGCOR's Know Your Customer (KYC) regulations and the Anti-Money Laundering Act (AMLA) of the Philippines, x0play may collect:

• Government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or live photo for identity matching purposes
• Proof of payment method ownership

2.3 Financial Data

To process deposits and withdrawals, x0play collects:

• GCash or PayMaya account details (mobile number linked to the e-wallet)
• Bank account details for BPI, BDO, Metrobank, or UnionBank transfers
• Transaction history within the x0play platform
• Deposit and withdrawal amounts and timestamps

x0play does not store full bank account numbers or card numbers on our servers. Payment processing is handled by certified payment service providers using industry-standard encryption.

2.4 Gaming Activity Data

x0play automatically records data related to your gaming activity, including:

• Games played, bet amounts, and game outcomes
• Session duration and login/logout timestamps
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)

2.5 Technical and Device Data

When you access x0play, we automatically collect certain technical information:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Referring URL and pages visited on x0play
• Session identifiers and authentication tokens

3. How We Collect Your Data

x0play collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: Through cookies, web beacons, and server logs when you browse or use the x0play platform.
• From third parties: From payment service providers (e.g., GCash, PayMaya, BPI) to verify transactions; from identity verification service providers to assist with KYC compliance; and from PAGCOR or other regulatory bodies where required by law.

4. How We Use Your Personal Data

x0play uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your x0play account.
• Identity verification: To verify your age (21+) and identity as required by PAGCOR and AMLA regulations.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and 7-Eleven eCash.
• Customer support: To respond to your inquiries, complaints, and support requests.
• Regulatory compliance: To comply with PAGCOR licensing requirements, AMLA obligations, and other applicable Philippine laws.
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the x0play platform.
• Responsible gaming: To monitor gaming activity and enforce responsible gaming tools such as deposit limits and self-exclusion.
• Platform improvement: To analyze usage patterns and improve the x0play platform, games, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted by applicable law. You may opt out at any time.

5. Legal Basis for Processing

x0play processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the x0play Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained.

6. Sharing Your Personal Data

x0play does not sell your personal data to third parties. We may share your data with the following categories of recipients only where necessary and lawful:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and 7-Eleven eCash, to process your financial transactions.
• Identity verification providers: Third-party KYC service providers engaged to assist with age and identity verification.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies where required by law or court order.
• Game software providers: Licensed game providers whose titles are available on x0play, to the extent necessary for game operation and fairness auditing.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection service providers engaged to support x0play's technical infrastructure.

7. Data Retention

x0play retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law. Specifically:

• Account and KYC data is retained for a minimum of five (5) years after account closure, as required by AMLA regulations.
• Transaction records are retained for a minimum of five (5) years in accordance with PAGCOR and AMLA requirements.
• Gaming activity logs are retained for three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Marketing consent records are retained until you withdraw consent or for three (3) years after your last interaction with x0play, whichever is earlier.

After the applicable retention period, your personal data will be securely deleted or anonymized in accordance with x0play's data disposal procedures.

8. Data Security

x0play implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and x0play's servers.
• AES-256 encryption for sensitive data stored in x0play's databases.
• Multi-factor authentication (MFA) options for player accounts.
• Regular security audits and penetration testing by independent cybersecurity firms.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• 24/7 monitoring of x0play's systems for suspicious activity and potential data breaches.

In the event of a personal data breach that poses a risk to your rights and freedoms, x0play will notify the National Privacy Commission (NPC) and affected players in accordance with the Data Privacy Act of 2012 and NPC Circular 16-03.

9. Cookies and Tracking Technologies

x0play uses cookies and similar tracking technologies to enhance your experience on the platform. The types of cookies we use include:

• Essential cookies: Required for the x0play platform to function correctly, including session management and security features. These cannot be disabled.
• Analytics cookies: Used to understand how players use x0play, which pages are most visited, and how we can improve the platform. Data collected is aggregated and anonymized.
• Preference cookies: Used to remember your settings and preferences on x0play, such as language and display options.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the x0play platform.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by x0play:

• Right to be informed: The right to know what personal data x0play collects and how it is used — which this Policy fulfills.
• Right of access: The right to request a copy of the personal data x0play holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to x0play's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe x0play has violated your data privacy rights.

To exercise any of these rights, please contact x0play's Data Protection Officer through the live chat feature inside your x0play account or by email at [email protected]. x0play will respond to all data privacy requests within thirty (30) days.

11. Minors and Age Restriction

12. Changes to This Privacy Policy

x0play reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, x0play will notify registered players via email or an in-platform notification. The updated Policy will be posted on this page with a revised "Last Updated" date.

Your continued use of x0play following the posting of a revised Privacy Policy constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how x0play protects your personal data.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or x0play's data practices, please contact x0play's Data Protection Officer:

Email: [email protected]

Live chat is available 24/7 inside your x0play account dashboard and is the fastest way to reach our team. For formal data privacy requests, written correspondence via email is recommended to ensure a proper paper trail and timely response within the 30-day statutory period.

You may also file a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.