grabph Privacy Policy

1. Information We Collect

1.1 Personal Information

When you register for a grabph account, we collect personal information necessary to verify your identity, comply with regulatory requirements, and provide our services. This information includes but is not limited to:

• Identification Data: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (e.g., passport number, driver's license number, UMID, Postal ID, or other valid Philippine IDs).
• Contact Information: Email address, mobile phone number, residential address, postal code, and city/municipality of residence within the Philippines.
• Account Credentials: Username, password (encrypted), security questions and answers, and two-factor authentication settings.
• Financial Information: Payment method details including GCash account number, Maya account information, bank account numbers for deposits and withdrawals, cryptocurrency wallet addresses, and transaction history.
• Verification Documents: Copies of government-issued IDs, proof of address documents (utility bills, bank statements), selfie photographs for identity verification, and source of funds documentation when required for compliance purposes.

1.2 Technical and Usage Data

To improve our services, enhance security, and personalize your experience, grabph automatically collects certain technical information when you access our platform:

• Device Information: Device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and unique device identifiers.
• Log Data: IP address, access times, pages viewed, time spent on pages, referring/exit pages, clickstream data, and interaction with website features.
• Location Data: Approximate geographic location derived from IP address to ensure compliance with jurisdictional restrictions and verify that you are accessing our services from within the Philippines.
• Gaming Activity: Games played, bet amounts, win/loss records, bonus usage, participation in tournaments, and gaming preferences.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies to maintain session state, remember preferences, and analyze site usage patterns.

1.3 Information from Third Parties

We may receive additional information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations:

• Payment processors and e-wallet providers (GCash, Maya, banks) to verify transactions and account ownership.
• Identity verification services to confirm the authenticity of submitted documents and prevent identity theft.
• Credit reference agencies and fraud prevention databases to assess risk and detect suspicious activity.
• Marketing partners and affiliate networks (only if you came to grabph through such channels).

2. How We Use Your Information

2.1 Primary Purposes

grabph processes your personal information for the following legitimate business purposes:

• Account Management: Creating and maintaining your player account, authenticating your identity during login, and providing customer support services.
• Service Delivery: Processing deposits and withdrawals, managing your account balance, facilitating gaming activities, crediting bonuses and promotions, and maintaining transaction records.
• Regulatory Compliance: Verifying your age (21+ requirement), confirming your identity in accordance with Know Your Customer (KYC) regulations, preventing money laundering and terrorist financing, complying with PAGCOR reporting requirements, and maintaining records as required by Philippine law.
• Security and Fraud Prevention: Detecting and preventing fraudulent transactions, identifying multiple accounts and bonus abuse, monitoring for suspicious activity patterns, and protecting against unauthorized access to accounts.
• Communication: Sending account-related notifications, transaction confirmations, promotional offers (if you have opted in), updates to terms and policies, and responding to your inquiries and support requests.
• Platform Improvement: Analyzing usage patterns to enhance user experience, developing new features and games, conducting market research, and improving site performance and security.

2.2 Legal Basis for Processing

Under the Data Privacy Act of 2012, we process your personal data based on the following legal grounds:

• Consent: You have provided explicit consent by accepting this Privacy Policy during registration and opting in to specific communications or data uses.
• Contract Performance: Processing is necessary to fulfill our contractual obligations to provide gaming services, process transactions, and manage your account as outlined in our Terms and Conditions.
• Legal Obligation: We are required to process certain data to comply with anti-money laundering laws, PAGCOR regulations, tax reporting requirements, and other applicable Philippine laws.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security enhancement, and service improvement, provided these interests do not override your fundamental privacy rights.

3. Data Sharing and Disclosure

3.1 When We Share Your Information

grabph does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with trusted third parties in the following circumstances:

3.2 Legal Requirements

We may disclose your personal information when required by law or in response to valid legal processes, including:

• Compliance with court orders, subpoenas, or warrants issued by Philippine courts or authorized government agencies.
• Cooperation with law enforcement investigations related to fraud, money laundering, or other criminal activities.
• Response to requests from PAGCOR or other regulatory bodies exercising their lawful authority.
• Protection of grabph's legal rights, property, or safety, or that of our users and the public, when permitted by law.

3.3 Business Transfers

In the event of a merger, acquisition, corporate reorganization, or sale of all or substantially all of grabph's assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

4. Data Security and Protection

4.1 Security Measures

grabph employs industry-standard security technologies and procedures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All sensitive data transmitted between your device and our servers is protected using TLS/SSL encryption. Passwords are hashed using advanced cryptographic algorithms (bcrypt or equivalent). Financial information and identification documents are encrypted at rest.
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data on a need-to-know basis. Multi-factor authentication is required for administrative access to sensitive systems.
• Network Security: Firewalls, intrusion detection systems, and regular security audits protect our infrastructure from external threats and unauthorized intrusions.
• Data Segregation: Personal data is logically segregated from other operational data and stored in secure, access-controlled databases hosted in certified data centers.
• Regular Testing: Periodic vulnerability assessments, penetration testing, and security reviews are conducted by qualified cybersecurity professionals to identify and remediate potential weaknesses.
• Employee Training: All grabph staff members undergo regular data privacy and security training to ensure proper handling of personal information and awareness of social engineering threats.

4.2 Your Security Responsibilities

While we implement robust security measures, the security of your account also depends on your actions:

• Create a strong, unique password and never share it with anyone.
• Enable two-factor authentication (2FA) on your account for enhanced security.
• Log out of your account when using shared or public devices.
• Be cautious of phishing attempts — grabph will never ask for your password via email or phone.
• Report any suspicious activity or unauthorized access to your account immediately.

4.3 Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, grabph will notify affected users within 72 hours of discovering the breach, as required by the Data Privacy Act. We will provide information about the nature of the breach, the data affected, and the steps we are taking to remediate the situation and prevent future occurrences.

5. Your Privacy Rights

5.1 Rights Under Philippine Law

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Information: The right to be informed about the collection and processing of your personal data, including the purposes, legal basis, and recipients of such data.
• Right to Access: The right to obtain confirmation that grabph is processing your personal data and to request copies of such data in a commonly used electronic format.
• Right to Rectification: The right to correct inaccurate or incomplete personal information held by grabph. You can update most information directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. Note that we may retain certain data to comply with legal obligations or resolve disputes.
• Right to Object: The right to object to the processing of your personal data for specific purposes, including direct marketing. You can opt out of promotional communications at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and to transmit that data to another service provider, where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe grabph has violated your privacy rights or failed to comply with the Data Privacy Act.

5.2 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. Include your full name, registered email address, and a detailed description of your request. We will respond to your request within fifteen (15) days of verification of your identity. For complex requests, this period may be extended by an additional fifteen (15) days with prior notification.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. They help us recognize your browser, remember your preferences, and provide a seamless user experience. grabph uses both session cookies (deleted when you close your browser) and persistent cookies (remain on your device for a set period or until manually deleted).

6.2 Types of Cookies We Use

• Essential Cookies: Necessary for the operation of our website and services. These cookies enable core functionality such as account login, transaction processing, and security features. They cannot be disabled.
• Performance Cookies: Collect anonymous information about how visitors use our site, which pages are most popular, and whether users encounter errors. This data helps us improve site performance and user experience.
• Functionality Cookies: Remember your preferences and choices (language, currency, display settings) to provide a more personalized experience on return visits.
• Marketing Cookies: Track your browsing activity to deliver relevant advertisements and promotional content. These cookies may be set by third-party advertising networks with our permission.

6.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are set. However, disabling essential cookies may impact the functionality of our platform and prevent you from accessing certain features. To learn more about cookie management, consult your browser's help documentation.

7. Updates to This Privacy Policy

grabph reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email (to the address associated with your account) and by posting a prominent notice on our website at least fifteen (15) days before the changes take effect. The "Effective Date" at the top of this policy indicates when the most recent revision was made.

Your continued use of grabph services after the effective date of any modifications constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you must discontinue use of our platform and may request account closure and data deletion in accordance with your rights outlined in Section 5.

8. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Data Protection Officer: [email protected]
• Customer Support: [email protected] (24/7 live chat also available)
• Mailing Address: grabph Data Protection Office, Manila, Philippines (full address available upon request for formal complaints)

For complaints or concerns that we have not adequately addressed, you may contact the National Privacy Commission (NPC) of the Philippines:

• National Privacy Commission: 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto St., Pasay City 1307, Metro Manila, Philippines
• Email: [email protected]
• Website: privacy.gov.ph