1play Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is published by 1play ("1play", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with your use of the 1play online gaming platform accessible at 1play.ws, including all associated games, services, mobile-optimized interfaces, customer support channels, and promotional communications.

This Policy has been prepared in accordance with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC). It describes our practices regarding the personal data of all individuals who interact with the 1play platform, including registered players, prospective players, and visitors to the 1play website.

This Policy should be read alongside the 1play Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and 1play.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection law, 1play acts as the Personal Information Controller (PIC) in respect of the personal data it collects from players and website visitors. This means 1play determines the purposes and means of processing your personal data.

Where 1play engages third-party service providers to process personal data on its behalf — such as payment processors, game studios, identity verification providers, and cloud infrastructure providers — those parties act as Personal Information Processors (PIPs) and are contractually bound to process your data only on 1play's documented instructions, in accordance with this Policy and applicable Philippine data protection law.

3. Personal Data We Collect

1play collects the following categories of personal data from players and website visitors. We only collect data that is adequate, relevant, and limited to what is necessary for the specified purpose.

3.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for mandatory 21+ age verification)
• Residential address (including city, province, and postal code)
• Philippine mobile number
• Email address
• Username and encrypted password
• Government-issued Philippine ID document (PhilSys, driver's license, passport, SSS, UMID, or PRC ID) submitted during KYC verification
• Selfie or live photo for biometric identity matching (where required for KYC)

3.2 Financial & Transaction Data

• GCash account number or PayMaya account details
• Bank account details (BPI, BDO, or Metrobank account number and account name)
• USDT wallet address (where applicable)
• Deposit and withdrawal transaction history
• Account balance and bonus credit history
• Source of funds documentation (where requested for AML compliance)

3.3 Gaming & Behavioral Data

• Game session history, wager amounts, win/loss records, and jackpot data
• Bonus claim and wagering requirement completion records
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Player preferences, favorite games, and platform interaction patterns

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Session timestamps, page visit logs, and clickstream data
• Cookie identifiers and tracking pixel data (see Section 8)

3.5 Communications Data

• Records of live chat, email, and support ticket communications with 1play
• Responses to surveys, promotions, or feedback forms
• Marketing communication preferences and opt-in/opt-out records

4. How We Collect Your Data

1play collects personal data through the following channels and methods:

4.1 Directly From You

The majority of personal data we hold about you is provided directly by you, including when you: complete the 1play registration form; submit KYC verification documents; make a deposit or withdrawal request; contact 1play customer support; participate in a promotion or survey; or update your account profile settings.

4.2 Automatically During Platform Use

When you access and use the 1play platform, certain technical and behavioral data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, session duration, pages visited, games played, and betting activity. This automatic collection occurs every time you interact with the platform, regardless of whether you are logged in.

4.3 From Third-Party Service Providers

1play may receive personal data about you from the following categories of third-party sources:

• Identity Verification Providers: Third-party KYC services that verify the authenticity of your government-issued ID and perform age and identity checks.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency payment gateways may share transaction confirmation data with 1play.
• Fraud Prevention Services: Third-party fraud detection platforms that share risk scoring and device fingerprinting data to help 1play identify suspicious activity.
• Self-Exclusion Registries: Where you have registered on a recognized self-exclusion list, 1play may receive confirmation of your exclusion status from the relevant registry operator.

5. How We Use Your Personal Data

1play uses your personal data for the following specific and documented purposes:

• Account Management: Creating, maintaining, and administering your 1play player account, including processing deposits, withdrawals, and bonus credits.
• Identity & Age Verification: Verifying your identity and confirming that you meet the mandatory 21-year age requirement under applicable Philippine gaming regulations.
• Service Delivery: Providing you with access to the full range of 1play games and platform features, including slots, live casino, bingo, and fishing games.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, money laundering, and other prohibited activities.
• Regulatory Compliance: Meeting our legal obligations under Philippine gaming regulations, anti-money laundering laws, and the Data Privacy Act of 2012, including filing mandatory reports with the Anti-Money Laundering Council (AMLC) where required by law.
• Responsible Gaming: Monitoring gaming behavior to identify signs of problem gambling and enforcing responsible gaming tool settings, deposit limits, and self-exclusion requests.
• Customer Support: Responding to your inquiries, resolving complaints, and providing technical assistance.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have provided your explicit consent to receive such communications. You may withdraw consent at any time via your account settings or by contacting support.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve game performance, platform usability, and player experience.
• Legal Claims: Establishing, exercising, or defending legal claims in the event of disputes between you and 1play.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 1play processes your personal data on one or more of the following lawful bases:

• Performance of a Contract: Processing necessary for the performance of the player account agreement between you and 1play — including account registration, payment processing, game provision, and customer support.
• Legal Obligation: Processing required for 1play to comply with its legal obligations under Philippine gaming regulations, AML laws, tax regulations, and data protection law — including KYC verification, transaction reporting, and data retention requirements.
• Legitimate Interest: Processing necessary for 1play's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming oversight — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

7. Data Sharing & Disclosure

1play does not sell your personal data. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

7.1 Game Providers & Technology Partners

Certified third-party game studios and platform technology providers who supply the games and software infrastructure that powers the 1play platform. These providers may receive limited technical and session data necessary to deliver game functionality. All such providers are contractually bound to process your data only on 1play's instructions.

7.2 Payment Service Providers

Philippine payment processors including GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency payment gateways, who receive the personal and financial data necessary to process your deposit and withdrawal transactions.

7.3 Identity Verification & Fraud Prevention Services

Third-party KYC and fraud detection service providers who process your identity documents and device data to verify your identity, confirm your age, and assess fraud and money laundering risk in compliance with applicable regulations.

7.4 Regulatory & Law Enforcement Authorities

1play may be legally required to disclose your personal data to Philippine government authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or law enforcement agencies, where required by applicable law, court order, or regulatory directive.

7.5 Professional Advisers

Legal counsel, auditors, accountants, and other professional advisers engaged by 1play in connection with legal proceedings, regulatory compliance, or business operations, subject to strict professional confidentiality obligations.

8. Cookies & Tracking Technologies

The 1play website uses cookies and similar tracking technologies to enhance your browsing experience, maintain session security, and analyze platform performance. A "cookie" is a small text file placed on your device by a website when you visit it. The following categories of cookies are used on the 1play platform:

8.1 Essential Cookies

These cookies are strictly necessary for the 1play platform to function. They include session authentication cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery (CSRF), and load-balancing cookies that ensure platform stability. Essential cookies cannot be disabled without significantly impairing platform functionality.

8.2 Performance & Analytics Cookies

These cookies collect anonymized data about how players use the 1play platform — such as which pages are visited most frequently, which games are most popular, and where errors occur. This information helps 1play improve platform performance and user experience. These cookies do not collect personally identifiable information.

8.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, display settings, and last-visited game lobby — so that you don't have to re-enter them every time you visit. Disabling these cookies may affect the personalized functionality of the platform.

8.4 Managing Your Cookie Preferences

You can manage non-essential cookie preferences through the cookie consent tool presented when you first visit the 1play website. You may also configure your browser settings to block or delete cookies at any time. Note that blocking essential cookies may prevent you from accessing certain features of the 1play platform, including your account login.

9. Data Security

1play implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and 1play servers is encrypted using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive personal data — including identity documents, payment details, and passwords — is stored in encrypted form. Passwords are hashed using a one-way cryptographic algorithm and are never stored in plain text.
• Access Controls: Access to systems holding personal data is restricted to authorized 1play personnel who require access to perform their job functions. All internal access is logged and audited.
• Multi-Factor Authentication: Administrative access to 1play's internal systems requires multi-factor authentication (MFA). Players are also encouraged to enable two-factor authentication (2FA) on their accounts.
• Regular Security Audits: 1play conducts regular vulnerability assessments and penetration tests of its platform infrastructure. Game integrity is independently audited by certified third-party testing laboratories.
• Incident Response Plan: 1play maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, 1play will notify the National Privacy Commission (NPC) and affected players in accordance with the timelines required by the Data Privacy Act.

While 1play takes all reasonable steps to protect your personal data, no system is entirely immune to security risks. You are responsible for maintaining the security of your own 1play login credentials and for promptly notifying 1play support if you suspect unauthorized access to your account.

10. Data Retention

1play retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable Philippine law and gaming regulations. Our general data retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with you as an individual.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 1play. To exercise any of these rights, please contact the 1play Data Protection Officer at [email protected] with the subject line "Data Privacy Request". 1play will respond within the timeframes required by applicable law.

12. Children & Minors

The 1play platform is strictly intended for adults aged 21 years and above, in accordance with applicable Philippine gaming regulations. 21+ 1play does not knowingly collect personal data from individuals under the age of 21.

If 1play discovers or has reason to believe that personal data has been collected from a person under 21 years of age, the affected account will be immediately suspended, all associated personal data will be deleted from 1play's systems in accordance with applicable law, and any deposits made will be handled in accordance with regulatory requirements. Parents or guardians who believe that their minor child has registered a 1play account should contact 1play support immediately at [email protected].

13. International Data Transfers

As an online gaming platform, 1play may process or store certain categories of personal data on servers or infrastructure located outside the Philippines — for example, in connection with cloud-based game delivery infrastructure or fraud prevention services operated by international providers.

Where personal data is transferred outside the Philippines, 1play ensures that such transfers are subject to appropriate safeguards that provide a level of data protection equivalent to that afforded under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission.
• Transfers to jurisdictions recognized as providing an adequate level of data protection.
• Binding corporate rules or other approved transfer mechanisms where applicable.

By using the 1play platform, you acknowledge and consent to such international transfers of your personal data, subject to the safeguards described above.

14. Updates to This Privacy Policy

1play reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, 1play will provide notice to registered players via the email address associated with their account and by posting a prominent notice on the 1play website.

The "Last Updated" date displayed at the top of this Policy will be revised to reflect the date of the most recent changes. Your continued use of the 1play platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated Policy. If you do not agree to the revised Policy, you must cease using the platform and may request account closure by contacting 1play support.

We encourage you to review this Privacy Policy periodically to stay informed about how 1play protects your personal data.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or 1play's handling of your personal data, please contact the 1play Data Protection Officer using the following details:

• Email: [email protected] — please use the subject line "Data Privacy Request" for all privacy-related inquiries
• Live Chat: Available 24/7 through the 1play platform for general inquiries
• Response Time: Data subject requests will be acknowledged within 72 hours and fully responded to within the timeframes required by the Data Privacy Act of 2012

If you are not satisfied with 1play's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent body responsible for enforcing the Data Privacy Act of 2012.