Privacy Policy

01 Overview & Scope

This Privacy Policy applies to all personal data collected, processed, and stored by 40phginto in connection with your use of the platform, including the website at 40phginto.one, any associated mobile interfaces, and all customer support communications.

40phginto acts as the Personal Information Controller as defined under the Philippine Data Privacy Act of 2012. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is lawful, fair, and transparent.

By registering an account or using any part of the 40phginto platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you must discontinue use of the platform immediately.

02 Personal Data We Collect

40phginto collects the following categories of personal data from registered players and platform visitors:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming assessments and only with your explicit consent.

03 How We Collect Your Data

40phginto collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, or contacting our support team;
• Automated Collection: Technical data collected automatically when you access the platform, including IP addresses, device identifiers, and browsing behavior via cookies and similar technologies;
• Third-Party Providers: Identity verification data from KYC service providers; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank; fraud detection signals from security partners;
• Publicly Available Sources: In limited circumstances, we may verify information against publicly available Philippine government databases for identity and age verification purposes.

04 Purpose of Data Processing

40phginto processes your personal data for the following specific purposes:

• To create, verify, and manage your player account on the 40phginto platform;
• To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers;
• To verify your identity and age (21+) in compliance with Philippine gaming regulations;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities;
• To provide customer support and resolve disputes or complaints;
• To personalize your gaming experience and deliver relevant promotions where you have consented to receive them;
• To monitor gaming activity for responsible gaming purposes, including identifying signs of problem gambling;
• To comply with applicable Philippine laws, regulatory requirements, and court orders;
• To improve the platform's performance, security, and user experience through analytics;
• To send transactional communications, including deposit confirmations, withdrawal notifications, and security alerts.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 40phginto processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management and payment processing;
• Legal Obligation: Processing required to comply with Philippine laws, including anti-money laundering regulations, age verification requirements, and tax reporting obligations;
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent: Processing for marketing communications and optional personalization features, where you have provided explicit, informed consent. You may withdraw this consent at any time.

06 Data Sharing & Disclosure

40phginto does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing your financial transactions;
• Identity Verification Providers: Licensed KYC and AML service providers who assist with age verification and fraud prevention;
• Game Content Providers: Third-party game studios and live dealer operators whose games are available on the 40phginto platform, to the extent necessary for game delivery and dispute resolution;
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers operating under strict data processing agreements;
• Regulatory Authorities: Philippine government agencies, law enforcement, and courts where disclosure is required by law or a valid legal order;
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers who process personal data on behalf of 40phginto are required to implement appropriate technical and organizational security measures and are prohibited from using your data for any purpose other than the specific service they provide to us.

07 Data Retention

40phginto retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine financial regulations;
• Gaming Activity Data: Retained for three (3) years from the date of each gaming session;
• Support Communications: Retained for two (2) years from the date of the last communication;
• Technical and Log Data: Retained for twelve (12) months from the date of collection.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures. Where data is anonymized, it may be retained indefinitely for statistical and analytical purposes.

08 Security Measures

40phginto implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 40phginto platform is encrypted using industry-standard SSL/TLS protocols;
• Encrypted Data Storage: Sensitive personal and financial data is encrypted at rest using AES-256 encryption;
• Access Controls: Strict role-based access controls ensure that only authorized personnel can access personal data, and only to the extent required for their specific job function;
• Two-Factor Authentication: Available for all player accounts to provide an additional layer of login security;
• Regular Security Audits: The platform undergoes periodic security assessments and penetration testing by independent security professionals;
• Incident Response: 40phginto maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission (NPC) within the timeframes prescribed by Philippine law.

While 40phginto takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your account credentials and should notify us immediately if you suspect any unauthorized access to your account.

09 Cookies & Tracking Technologies

40phginto uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality;
• Functional Cookies: Remember your preferences such as language settings, display options, and game history to provide a more personalized experience;
• Analytics Cookies: Collect anonymized data about how players use the platform, including pages visited and features used, to help us improve performance and user experience;
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 40phginto platform. We do not use cookies to serve third-party advertising or to track your activity on other websites.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 40phginto:

• Right to Be Informed: The right to know what personal data we collect, how we use it, and with whom we share it — as set out in this Privacy Policy;
• Right of Access: The right to request a copy of the personal data we hold about you, along with information about how it is processed;
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days. We may require proof of identity before processing your request to protect against unauthorized access to your data.

11 Minors & Age Restriction

The 40phginto platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law governing online gambling and casino-style gaming. We do not knowingly collect personal data from individuals under the age of 21.

As part of our registration and identity verification process, all players are required to confirm their date of birth and provide a valid Philippine government-issued ID. Any account found to belong to a person under 21 years of age will be immediately suspended, and all associated personal data will be deleted in accordance with our data retention procedures.

If you believe that a minor has registered on the 40phginto platform, please contact us immediately at [email protected] so that we can take prompt action.

12 Cross-Border Data Transfers

In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines — for example, where our technology infrastructure providers or game content partners operate servers in other jurisdictions.

Where such transfers occur, 40phginto ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission;
• Transfers to countries recognized by the NPC as providing an adequate level of data protection;
• Binding corporate rules where data is transferred within a corporate group.

By using the 40phginto platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

13 Changes to This Privacy Policy

40phginto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. When material changes are made, we will notify registered players by email and/or by posting a prominent notice on the platform.

The version date displayed at the top of this page indicates when this Privacy Policy was last updated. We encourage you to review this page periodically. Your continued use of the 40phginto platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14 Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 40phginto, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the platform
• PH Local Support Hours: 8:00 AM – 12:00 MN PHT

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have not been adequately addressed by 40phginto. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.

This Privacy Policy was last updated on January 1, 2026 and is effective as of the same date. © 2026 40phginto. All rights reserved.