starph.com Privacy Policy
Your personal data belongs to you. This Privacy Policy explains in plain terms exactly what information starph.com collects, why we collect it, how we protect it, and what rights you hold as a data subject under Philippine law. We have written this document to be readable — not just legally defensible.
Privacy At a Glance — Key Facts About How starph.com Handles Your Data
Data Controller
starph.com, accessible at starphcom.app, is the personal information controller for all player data collected on this platform.
Governing Law
Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations govern all data processing activities on this platform.
Data Sales
starph.com does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing agencies. Ever.
Privacy Contact
All data privacy requests and concerns may be submitted to [email protected] and will be responded to within 15 business days.
Summary: starph.com collects personal data that is necessary to operate a licensed online gaming platform — account identity, payment records, and gaming activity logs. We use this data to deliver our service, comply with PAGCOR licensing conditions, and meet our Anti-Money Laundering obligations under Philippine law. We do not sell your data. We protect it with industry-standard security. You have clear, exercisable rights over it. This document explains all of that in full.
Introduction
This Privacy Policy ("Policy") is issued by starph.com ("we," "us," "our," "the Platform"), the operator of the online gaming platform accessible at starphcom.app. This Policy describes how we collect, use, store, protect, and in limited circumstances share the personal information of individuals ("you," "your," "Data Subject") who register for and use our platform.
starph.com is committed to the responsible handling of personal data and to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. All data processing activities conducted by starph.com are designed to meet or exceed the standards mandated by RA 10173.
This Policy applies to all personal data collected by starph.com through the starphcom.app website, any browser-based mobile application, customer support channels, and any other service offered under the starph.com brand. It applies to all registered players, prospective players who interact with the platform without completing registration, and individuals who contact our support team.
By creating a starph.com account or otherwise providing your personal information to us, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your data as described herein. If you do not agree with this Policy, you should not create an account or use our services.
Personal Data We Collect
starph.com collects personal data across several categories, each serving a specific and necessary function in the operation of a regulated online gaming platform. We collect only the data that is necessary for the stated purposes — no more.
| Data Category | Specific Data Points | Required / Optional |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued Philippine ID type and number, selfie or photo verification | Required (KYC) |
| Contact Data | Email address, Philippine mobile number, residential address | Required |
| Account Data | Username, encrypted password, account creation date, account status, login history | Required |
| Financial Data | GCash / PayMaya account reference, bank account details (masked), deposit and withdrawal amounts and timestamps, wallet balance history | Required |
| Gaming Activity Data | Game sessions played, bet amounts, outcomes, win/loss records, bonus activity, responsible gaming limit settings | Required (regulatory) |
| Technical Data | IP address, device type and identifier, browser type and version, operating system, session duration, geolocation data | Required (security) |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Collected when you contact us |
| Marketing Preferences | Promotional communication opt-in/opt-out status, preferred communication channel | Optional |
Sensitive Personal Information: Government ID data and financial account details are classified as sensitive personal information under RA 10173. starph.com applies heightened security protocols to this data category, including end-to-end encryption, strict access controls, and staff confidentiality obligations. This data is accessed only by authorized personnel for specific, documented purposes.
How We Collect Your Data
starph.com collects personal data through the following channels and mechanisms:
3.1 Direct Collection. You provide data directly to starph.com when you: register for a player account; complete identity verification (KYC); make a deposit or request a withdrawal; contact customer support; respond to surveys or promotional communications; or set responsible gaming preferences in your account dashboard.
3.2 Automated Technical Collection. When you access starphcom.app, our systems automatically collect certain technical data including your IP address, device identifiers, browser information, and session activity logs. This data is collected passively as a necessary function of platform security, fraud detection, and service optimization. See Section 8 for information about cookies and tracking technologies.
3.3 Payment Processors. When you make a deposit or withdrawal using GCash, PayMaya, BPI, BDO, or Metrobank, our payment processing partners share limited transaction confirmation data with starph.com — sufficient to credit or debit your wallet accurately. Full payment account credentials are never transmitted to or stored by starph.com; they are handled entirely by the respective payment provider.
3.4 Identity Verification Partners. As required by PAGCOR and AMLA regulations, starph.com may use accredited third-party identity verification services to validate your Philippine government ID during the KYC process. These services operate under their own privacy policies and data protection frameworks consistent with Philippine law.
3.5 PAGCOR and Regulatory Sources. starph.com receives information from PAGCOR regarding players listed on gaming exclusion registries. This data is used exclusively to enforce exclusion requirements and is not used for marketing or any other purpose.
Purpose & Legal Basis for Processing
starph.com processes your personal data only for specific, declared purposes. Under RA 10173, each processing activity requires a valid legal basis. The following table identifies our primary processing purposes and the legal basis applicable to each:
| Processing Purpose | Legal Basis (RA 10173) |
|---|---|
| Account registration and management | Performance of contract (Terms & Conditions) |
| Identity verification (KYC) and age confirmation | Legal obligation (PAGCOR licensing, AMLA) |
| Processing deposits and withdrawals | Performance of contract; Legal obligation (AMLA) |
| Regulatory reporting and PAGCOR compliance | Legal obligation (PAGCOR Act, AMLA) |
| Fraud detection and platform security | Legitimate interests of starph.com and players |
| Customer support and dispute resolution | Performance of contract; Legitimate interests |
| Responsible gaming monitoring | Legal obligation (PAGCOR responsible gaming rules) |
| Promotional communications | Consent (you may withdraw at any time) |
| Platform analytics and improvement | Legitimate interests (anonymized/aggregated data) |
Marketing Communications: starph.com will send you promotional emails, SMS notifications, or in-platform messages only if you have provided express consent during registration or through your account notification settings. You may withdraw marketing consent at any time through your account preferences or by contacting support — withdrawal does not affect your ability to use the platform or any other processing activity.
Data Sharing & Disclosure
5.1 No Sale of Personal Data. starph.com does not sell, rent, exchange, or otherwise commercialize your personal data with any third party for their marketing, advertising, or commercial purposes. This is an unconditional commitment.
5.2 Regulated Disclosures. starph.com is required by law and by the conditions of our PAGCOR license to share certain player data with the following authorities:
- Philippine Amusement and Gaming Corporation (PAGCOR) — for licensing compliance, audit purposes, and enforcement of the PAGCOR exclusion registry
- Anti-Money Laundering Council (AMLC) — for suspicious transaction and covered transaction reporting required under RA 9160 as amended by RA 10365
- National Privacy Commission (NPC) — in the event of a personal data breach notification obligation, or in response to a lawful NPC investigation or order
- Law enforcement and judicial authorities — when required by a valid court order, subpoena, or legal process issued under Philippine law
5.3 Service Providers. starph.com engages trusted third-party service providers to assist in operating the platform. These providers access your personal data only to the extent necessary to deliver their contracted services and are bound by contractual data processing agreements requiring them to maintain confidentiality and comply with RA 10173. Categories of service providers include:
- Payment processing partners (GCash, PayMaya, BPI, BDO, Metrobank)
- Identity verification and KYC technology providers
- Cloud infrastructure and data storage providers
- Fraud detection and cybersecurity service providers
- Customer support platform providers
- Certified game software studios (for gaming activity data relevant to dispute resolution)
5.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of substantially all of the assets of starph.com, player personal data may be transferred to the successor entity. In such circumstances, you will be notified in advance, and the successor entity will be required to honor the commitments made in this Privacy Policy.
All third-party recipients of starph.com player data are contractually prohibited from using that data for any purpose beyond the specific service they are engaged to provide. starph.com maintains a register of all third-party data processors, available upon formal written request.
Data Retention
6.1 Retention Periods. starph.com retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, and for such additional period as required by Philippine law or regulatory obligation:
- Account and identity data — retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required by AMLA
- Financial and transaction records — retained for a minimum of five (5) years following the transaction date, in compliance with AMLA and PAGCOR record-keeping requirements
- Gaming activity logs — retained for three (3) years following the relevant activity date, for audit and dispute resolution purposes
- Customer support communications — retained for two (2) years following the resolution of the relevant support interaction
- Marketing preference records — retained for the duration of the account relationship, or until consent is withdrawn, whichever is earlier
- Technical and security logs — retained for ninety (90) days for routine security monitoring; extended to three (3) years where relevant to an active fraud investigation or legal proceeding
6.2 Deletion. Upon the expiry of the applicable retention period, personal data is securely deleted or permanently anonymized so that it can no longer be attributed to an identifiable individual. Anonymized or aggregated statistical data derived from historical gaming activity may be retained indefinitely for research and business improvement purposes.
Security Measures
starph.com implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
- Transport Layer Security (TLS/SSL): All data transmitted between your device and starphcom.app is encrypted using industry-standard TLS 1.2 or higher. The padlock icon in your browser confirms an active encrypted connection
- Encryption at Rest: Sensitive personal data and financial records stored in starph.com systems are encrypted at rest using AES-256 encryption
- Password Hashing: Account passwords are stored exclusively as one-way cryptographic hashes. starph.com staff cannot retrieve or view your password in plaintext under any circumstances
- Access Controls: Internal access to personal data is restricted on a need-to-know basis. Staff with authorized access undergo background checks and are bound by confidentiality obligations
- OTP Authentication: Platform login from new or unrecognized devices requires SMS-based one-time password verification to your registered Philippine mobile number
- Intrusion Detection: starph.com operates continuous network monitoring and intrusion detection systems to identify and respond to unauthorized access attempts in real time
- Vulnerability Management: Regular penetration testing and security audits are conducted by qualified cybersecurity professionals
7.1 Data Breach Response. In the event of a personal data breach that poses a real risk to the rights and freedoms of affected individuals, starph.com will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by RA 10173. Affected data subjects will be notified promptly where the breach poses a high risk to their rights.
Your Role in Account Security: Technical security measures are most effective when paired with strong personal practices. We strongly encourage all starph.com players to use a unique, strong password, to enable OTP verification, and never to share their account credentials with anyone. See the Login Guide for account security recommendations.
Cookies & Tracking Technologies
starph.com uses cookies and similar technologies to operate the platform effectively, maintain your authenticated session, detect fraud, and understand how players use the site. Cookies are small text files stored on your device by your browser at our request.
8.1 Essential Cookies. These cookies are strictly necessary for the platform to function. They maintain your login session, store your language preference, and enable the secure payment flow. Essential cookies cannot be disabled without breaking core platform functionality.
8.2 Security Cookies. starph.com uses security cookies for fraud detection and to identify unusual login patterns — for example, a login from a device or location significantly different from your normal access pattern. These cookies contribute directly to the protection of your account.
8.3 Performance and Analytics Cookies. starph.com collects anonymized data about how players navigate the platform — which pages are visited, which games are launched, and where players encounter difficulty. This data is used exclusively to improve the platform experience and is not linked to individual identifiable accounts for marketing purposes.
8.4 Managing Cookies. Your browser settings allow you to view, delete, and block cookies. Blocking essential cookies will prevent you from logging in to your starph.com account. Blocking analytics cookies will not affect your ability to use the platform. Detailed instructions for managing cookies in your specific browser are available through your browser's help documentation.
Your Rights Under RA 10173
As a data subject under the Philippine Data Privacy Act, you hold specific, enforceable rights in relation to your personal data held by starph.com. These rights are summarized below. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request." starph.com will respond within fifteen (15) business days.
Right to Be Informed
You have the right to know that starph.com is collecting and processing your personal data, the purposes for which it is processed, and the categories of third parties with whom it may be shared. This Privacy Policy fulfills that obligation.
Right of Access
You have the right to request a copy of the personal data that starph.com holds about you, along with information about how it is being processed. We will provide this data in a structured, commonly used format.
Right to Rectification
If any personal data starph.com holds about you is inaccurate, incomplete, or outdated, you have the right to request correction. Most account data (email, mobile number) can be updated directly through your account settings without needing to contact support.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected. Note that this right is subject to legal retention obligations — starph.com cannot erase financial transaction records required to be retained under AMLA, for example.
Right to Object
You have the right to object to the processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your individual rights outweigh those interests in a specific context.
Right to Data Portability
Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
Right to Lodge a Complaint
If you believe that starph.com has processed your personal data in violation of RA 10173, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. We encourage you to contact starph.com first, but the NPC route is always available to you.
starph.com will not charge a fee for processing data subject rights requests made in good faith. We will respond to all requests within fifteen (15) Philippine business days. For complex requests, we may extend this by an additional fifteen (15) days with prior notification to you.
Minors and Age Restriction
starph.com is strictly an adult platform. Under PAGCOR regulations, the minimum age to create and use a starph.com account is twenty-one (21) years of age. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.
During the registration process, all users are required to confirm their date of birth. Accounts where the declared age is under 21 are blocked from completion. Identity verification (KYC) provides a secondary age-confirmation layer — government-issued Philippine IDs submitted during KYC are checked to confirm the account holder meets the minimum age requirement.
If starph.com discovers that personal data has been collected from an individual under 21 years of age — whether through misrepresentation during registration or any other means — the relevant account will be permanently closed, all balances will be handled in accordance with applicable regulatory requirements, and the collected data will be deleted to the extent permitted by law.
If you are a parent or guardian and believe that a minor in your household has created a starph.com account, please contact [email protected] immediately. We will investigate and take appropriate action, including account closure and data deletion, as quickly as possible.
Cross-Border Data Transfers
starph.com primarily stores and processes player data within infrastructure located in or servicing the Philippine market. However, certain third-party service providers engaged by starph.com — particularly cloud infrastructure providers and certified game software studios — may process data on infrastructure located outside the Philippines.
Where personal data is transferred outside the Philippines, starph.com ensures that such transfers are conducted in compliance with RA 10173 requirements for cross-border data transfers, including:
- Ensuring that the recipient country provides adequate data protection standards, or
- Entering into appropriate contractual safeguards, including standard data processing agreements requiring the recipient to maintain security standards equivalent to those required under RA 10173
starph.com does not transfer personal data to jurisdictions known to have inadequate data protection frameworks without implementing appropriate additional safeguards. Information about the specific countries to which data may be transferred is available upon written request to our privacy contact.
Changes to This Privacy Policy
12.1 Right to Amend. starph.com reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, updates to Philippine law or NPC guidelines, PAGCOR regulatory requirements, or changes to the services we provide. We are committed to keeping this Policy current and accurate.
12.2 Notification of Material Changes. Where we make material changes to this Policy — changes that significantly affect your rights or how your data is used — we will notify you by displaying a prominent notice upon your next platform login and, where contact details are available, by email to your registered address. We will not apply material changes retroactively without your consent where consent is the relevant legal basis.
12.3 Continued Use. Your continued use of the starph.com platform after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with an updated Policy, you should cease using the platform and may request account closure.
We recommend checking this Privacy Policy page periodically. The "Last Updated" date at the top of the page reflects the current version. A summary of recent material changes is available by contacting our support team.
Contact & Privacy Complaints
If you have questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a concern about how starph.com has handled your personal data, please contact us:
Data Controller: starph.com
Platform: starphcom.app
Privacy Contact Email: [email protected]
Subject Line for Privacy Requests: "Data Subject Rights Request" or "Privacy Concern"
Response Commitment: Within 15 Philippine business days
13.1 Escalation to the NPC. If you are not satisfied with starph.com's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC administers RA 10173 and has jurisdiction over data processing activities conducted by Philippine-regulated entities. Information about filing a complaint with the NPC is available through the NPC's official website and public information channels.
Our Commitment: starph.com treats every privacy inquiry with seriousness. We will acknowledge receipt of your request promptly, investigate the concern thoroughly, and communicate our findings and any remedial action taken clearly and directly. Privacy is not an afterthought for us — it is an ongoing operational commitment.
How starph.com Protects Your Privacy
Beyond the legal language, these are the six real-world privacy commitments that shape how starph.com handles every Filipino player's data every day.
Zero Data Sales — Ever
This is the most important commitment we can make: starph.com will never sell, rent, or trade your personal information to advertisers, data brokers, or any other third party for commercial purposes. Your data is used to run your account — full stop. It is not an asset we monetize.
256-bit Encryption
All data in transit between your device and starphcom.app is protected by TLS encryption. Sensitive data at rest — government ID records, financial details, and passwords — is encrypted using AES-256, the same standard used by Philippine banks for online banking infrastructure.
Full RA 10173 Compliance
The Philippine Data Privacy Act gives Filipino citizens specific, exercisable rights over their personal data. starph.com has built its data processing practices around these rights — not as a compliance exercise, but as a genuine operational commitment to every player on the platform.
Minimal Retention Periods
starph.com retains personal data only for as long as necessary to fulfil the purpose it was collected for, or as required by Philippine law. When a retention period expires, data is securely deleted or permanently anonymized — it is never kept "just in case."
Controlled Internal Access
Access to player personal data inside starph.com is restricted to staff who genuinely need it to do their job. Access permissions are role-based, logged, and reviewed regularly. Staff with data access obligations sign confidentiality agreements and receive ongoing data protection training.
72-Hour Breach Notification
In the event of a data breach posing real risk to players, starph.com is committed to notifying the National Privacy Commission within 72 hours and affected players as quickly as possible. We will not minimize, delay, or conceal a breach — transparency in a crisis is non-negotiable.
Your Data is Safe at starph.com
starph.com is a PAGCOR-regulated platform built with genuine respect for Filipino players' privacy. You know exactly what data we collect, why we need it, and how we protect it. If that gives you confidence, the casino is ready when you are.
Privacy questions? Contact us at [email protected] — 24/7, Philippine Standard Time.
Related: Terms & Conditions · Responsible Gaming · About Us