plytime Privacy Policy

1. Introduction

plytime ("plytime", "we", "us", "our") is committed to protecting the privacy and personal data of every player who registers and plays on the plytime platform. This Privacy Policy sets out in detail the types of personal information we collect from you, the purposes for which we process that information, the parties with whom we may share it, and the rights available to you as a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations.

This Policy applies to all personal data collected through the plytime website (plytime.vip), any plytime mobile interface, live chat support interactions, and all other touchpoints through which you interact with the plytime platform. By using plytime's services, you consent to the collection, processing, and use of your personal information as described in this Policy.

2. Data Controller

The data controller responsible for the personal information collected through the plytime platform is plytime, the operator of plytime.vip. For all data privacy-related inquiries, requests, or complaints, you may contact plytime's designated Data Protection Officer (DPO) at:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 via the plytime platform

plytime will acknowledge data privacy requests within five (5) business days and endeavour to resolve them within thirty (30) calendar days of receipt.

3. Information We Collect

3.1 Information You Provide Directly

When you register for a plytime account, use our services, or contact our support team, we collect information you provide directly, including:

• Identity data: Full legal name, date of birth, nationality;
• Contact data: Philippine mobile number, email address (if provided);
• Verification data: Government-issued ID details (e.g., SSS ID, UMID, Philippine passport, driver's licence) submitted during KYC;
• Financial data: GCash account reference, PayMaya account reference, bank account details used for deposits and withdrawals — plytime does not store full card numbers;
• Communications data: Records of your support conversations, complaints, and feedback submitted to plytime.

3.2 Information Collected Automatically

When you access or use the plytime platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, time spent, click-through paths, and game session data;
• Login timestamps and session duration;
• Cookies and similar tracking technologies (see Section 7).

3.3 Information from Third Parties

plytime may receive personal information about you from third parties in limited circumstances, including identity verification service providers used during KYC, payment processors (e.g., GCash, PayMaya) for transaction confirmation, and fraud detection partners.

4. How We Use Your Data

plytime processes your personal data for the following purposes:

5. Legal Basis for Processing

plytime processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable Philippine privacy regulations:

• Contractual necessity: Processing required to fulfill our obligations under the plytime Terms & Conditions (e.g., account creation, transaction processing, game delivery);
• Legal obligation: Processing required to comply with Philippine law, including AML, KYC, and PAGCOR regulatory requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, where your prior consent has been obtained and may be withdrawn at any time.

6. Data Sharing & Disclosure

plytime does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard) — for processing deposits and withdrawals;
• Identity verification partners — for KYC document validation;
• Game software providers — game providers may receive anonymised session data for technical operation purposes;
• Fraud detection and cybersecurity partners — for identifying and preventing fraudulent activity;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies as required by law;
• Legal and professional advisers — where required in connection with legal proceedings or regulatory investigations;
• Successor entities — in the event of a merger, acquisition, or sale of plytime's business, subject to the same data protection obligations.

All third parties with whom plytime shares personal data are required to maintain appropriate technical and organisational security measures and to process personal data only for the purposes for which it was disclosed.

7. Cookies & Tracking Technologies

plytime uses cookies and similar tracking technologies on the plytime.vip platform. Cookies are small text files stored on your device that help us deliver a better user experience and analyse platform usage. The types of cookies used by plytime include:

• Strictly necessary cookies: Required for platform functionality including login session management and security. These cannot be disabled.
• Performance cookies: Used to collect anonymised information about how players navigate and use the plytime platform — e.g., pages visited and error messages encountered — to help us improve performance.
• Functional cookies: Remember your preferences such as language settings and game display options.
• Analytics cookies: Used by plytime's internal analytics team to understand aggregate platform usage patterns. No personal data is shared with third-party advertising networks.

You may adjust your browser settings to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the plytime platform. plytime does not use third-party advertising or behavioural tracking cookies.

8. Data Retention

plytime retains your personal data for as long as your plytime account is active and for a minimum period of five (5) years after account closure, in order to comply with the record-keeping requirements of the Anti-Money Laundering Act of the Philippines and PAGCOR's data retention guidelines. Specific retention periods by data category are as follows:

• KYC and identity documents: Minimum 5 years from account closure;
• Transaction records: Minimum 5 years from the date of the transaction;
• Support and communications records: 3 years from the date of the interaction;
• Technical logs (IP, session data): 12 months from collection, unless required for ongoing fraud investigations.

After the applicable retention period, plytime will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9. Security Measures

plytime implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and plytime's servers;
• Bcrypt hashing for all stored account passwords — plytime never stores passwords in plain text;
• OTP-based two-step verification for logins from new or unrecognised devices;
• Automatic session timeout after periods of inactivity;
• Role-based access controls restricting internal staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the plytime platform infrastructure.

Despite these measures, no internet transmission or electronic storage system is 100% secure. If plytime becomes aware of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the following rights in respect of your personal data held by plytime:

• Right to be informed: The right to know whether plytime holds personal data about you and to receive information about how it is processed — as set out in this Privacy Policy;
• Right of access: The right to request a copy of the personal data plytime holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data in certain circumstances, subject to plytime's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes;
• Right to data portability: The right to request a structured, machine-readable copy of personal data you have provided to plytime;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe plytime has violated your data privacy rights.

To exercise any of these rights, contact plytime's Data Protection Officer at [email protected] with subject line "Data Privacy Request". plytime will respond within thirty (30) calendar days.

11. Children's Privacy

The plytime platform is strictly intended for individuals aged 21 years and older in accordance with PAGCOR's minimum age requirement for online gaming in the Philippines. plytime does not knowingly collect personal data from any person under the age of 21. If plytime becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated personal data will be deleted, and any deposited funds will be returned to the originating payment method after satisfactory verification.

If you believe that a minor has registered a plytime account, please contact plytime support immediately at [email protected].

12. Cross-Border Data Transfers

plytime may transfer your personal data to service providers located outside of the Philippines — for example, cloud infrastructure providers or game software providers — where necessary for the operation of the plytime platform. Any such transfer will be subject to appropriate contractual safeguards consistent with the requirements of the Data Privacy Act of 2012 and applicable NPC issuances, ensuring that your personal data receives an equivalent level of protection regardless of where it is processed.

13. Amendments to this Privacy Policy

plytime may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via SMS notification to their registered Philippine mobile number and/or a prominent notice on the plytime platform at least seven (7) days prior to the updated Policy taking effect. The effective date of the current version is stated at the top of this Policy. Continued use of the plytime platform after the effective date constitutes acceptance of the updated Privacy Policy.

14. Contact & Complaints

For any questions, concerns, or requests regarding this Privacy Policy or plytime's data processing practices, please contact us:

• Email: [email protected] — subject line: "Data Privacy Request"
• Live Chat: Available 24/7 on the plytime platform — average response under 3 minutes

If you are not satisfied with plytime's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for overseeing compliance with the Data Privacy Act of 2012.