loveph Privacy Policy

This Privacy Policy applies to all personal information processed by loveph in connection with the operation of the loveph online gaming platform accessible at loveph.one. It applies to all registered players, prospective players who browse the Platform without registering, and any individual who contacts loveph for support or other purposes.

loveph operates in compliance with the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC). In addition, loveph processes personal data in accordance with its obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA) as amended, and other applicable Philippine statutes.

By creating a loveph account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

This Privacy Policy should be read alongside the loveph Terms and Conditions, which form part of the complete agreement between you and loveph. Defined terms not otherwise defined in this Policy carry the meanings given in the Terms and Conditions.

For the purposes of the Data Privacy Act of 2012, loveph acts as the Personal Information Controller in respect of all personal data collected through the Platform. loveph is responsible for determining the purposes and means of processing your personal information and for ensuring that all processing is conducted in accordance with applicable privacy law.

Where loveph engages third-party service providers (such as payment processors, game providers, or identity verification services) to process personal data on its behalf, those providers act as Personal Information Processors and are bound by data processing agreements that impose obligations consistent with this Policy and Philippine law.

loveph collects the following categories of personal data, as described in the table below:

loveph does not collect sensitive personal information as defined under Section 3(l) of RA 10173 (such as health, religious, or political data) except where required by PAGCOR regulations or AMLA compliance processes, in which case collection is limited strictly to what is legally required and processed with the appropriate heightened protections.

loveph collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account settings.
• Automated collection: Technical data collected automatically when you visit the Platform, including through cookies, server logs, and analytics tools. See Section 9 for full cookie details.
• Third-party collection: Identity and age verification data supplied by accredited KYC providers; fraud and AML screening data from compliance service providers; payment transaction data from GCash, Maya, BPI, BDO, and other payment processors.
• Publicly available sources: In limited circumstances where required for AML or fraud prevention, loveph may supplement its records with data from publicly available registries or databases, as permitted by Philippine law.

loveph processes your personal data only for specified, explicit, and legitimate purposes. The table below sets out the primary processing purposes, the data categories used, and the legal basis for each:

loveph does not use personal data for purposes incompatible with those listed above. Any new processing purpose not covered by this Policy will be communicated to you before processing begins, and consent will be sought where required.

loveph may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash (Mynt – Globe Fintech Innovations), Maya (Voyager Innovations), BancNet, partner banks (BPI, BDO, Metrobank) — for processing deposits and withdrawals only.
• Identity verification providers: Accredited third-party KYC and age verification services used to verify player identity and comply with PAGCOR and AMLA obligations.
• Game providers: Licensed game software providers whose games are available on the loveph Platform receive limited session data necessary for game delivery. Game providers do not receive payment or KYC data.
• Anti-money laundering (AML) screening services: Providers used to screen transactions and account activities against sanctions lists and high-risk indicators, as required by Philippine AMLA.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law, court order, or regulatory direction.
• IT and cloud infrastructure providers: Hosting, database, and security infrastructure providers operating under strict data processing agreements and, where applicable, the Philippines' cross-border transfer rules.
• Legal and professional advisers: Lawyers, auditors, and compliance consultants engaged by loveph, bound by professional confidentiality obligations.

In the event of a corporate restructuring, merger, acquisition, or sale of loveph's business or assets, your personal data may be transferred to a successor entity, subject to that entity honouring the terms of this Privacy Policy or providing equivalent protections.

loveph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and KYC records: Retained for a minimum of 5 years from account closure, as required by PAGCOR and AMLA regulations.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of 5 years from the date of the transaction, in compliance with AMLA reporting obligations.
• Customer support communications: Retained for 3 years from the date of the interaction, or longer if the communication relates to an unresolved dispute.
• Marketing consent records: Retained for the duration of the account, plus 2 years following account closure, to evidence consent status if queried.
• Technical and session logs: Retained for 12 months from generation for security and fraud monitoring purposes.
• Self-exclusion records: Retained permanently, to ensure that self-excluded players cannot be re-admitted in contravention of their exclusion request.

Following the expiry of the applicable retention period, loveph will securely delete or irreversibly anonymise personal data so that it can no longer be attributed to an individual. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and research purposes.

loveph implements a layered approach to data security, combining technical controls, organisational measures, and personnel training to protect your personal information against unauthorised access, disclosure, alteration, and destruction. Security measures include, but are not limited to:

• Encryption in transit: All data exchanged between your device and loveph servers is protected by TLS 1.2 / 1.3 (256-bit SSL) encryption. No personal or financial data is transmitted over unencrypted channels.
• Encryption at rest: Sensitive stored data — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 or equivalent standards.
• Password hashing: Account passwords are never stored in plain text. loveph uses cryptographic hashing with salt to store password data, such that original passwords cannot be recovered even in the event of database exposure.
• Access controls: Access to personal data within loveph's systems is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication required for all administrative access.
• OTP two-factor authentication: All player logins on new or unrecognised devices require SMS OTP verification to the registered Philippine mobile number, adding a layer of protection against unauthorised account access.
• Real-time fraud and anomaly detection: Automated systems monitor login patterns, transaction behaviour, and account activity for anomalies consistent with fraud, account compromise, or money laundering, with alerts escalated to loveph's security team for review.
• Penetration testing and security audits: loveph conducts periodic security assessments, including penetration testing by qualified third parties, to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no digital system can be guaranteed to be completely secure. If you become aware of or suspect any security incident affecting your loveph account, please notify us immediately at [email protected].

loveph uses cookies and similar tracking technologies on the Platform to ensure proper functionality, improve performance, and (with your consent) support personalisation and analytics. The following cookie categories are used:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session management cookies (to keep you logged in), CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing Platform use.
• Functional cookies: Remember your preferences such as language settings, game lobby view, and responsible gaming limit display preferences. Disabling these may reduce platform personalisation.
• Analytics cookies: Help loveph understand how players navigate the Platform — which pages are most visited, where users encounter errors, and how sessions flow. Data is aggregated and anonymised. loveph uses privacy-respecting analytics tools that do not transmit identifiable player data to third-party advertising networks.
• Security cookies: Used to detect suspicious login activity, enforce rate limits, and identify potential bot traffic or automated attacks against the Platform.

loveph does not use third-party advertising or tracking cookies that would share your personal data with advertisers or data brokers. You can manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to or using the Platform.

If loveph discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated transactions will be reviewed, and the personal data of the minor will be deleted without undue delay, except where retention is required by law (for example, as evidence in an AMLA-related investigation).

If you are a parent or guardian and believe that a person under 21 has created a loveph account using your or their contact details, please contact us immediately at [email protected] so we can investigate and take appropriate action.

Under the Philippines Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by loveph:

To exercise any of the above rights, please submit a written request to loveph's Data Protection Officer at [email protected] with the subject line "Data Privacy Request — [Right Name]". loveph will verify your identity before processing any data rights request to protect against fraudulent or unauthorised requests.

loveph will respond to all verified data rights requests within 15 business days. In complex cases, this period may be extended to 30 business days with prior notification to you. Requests to exercise data rights are free of charge for the first request per calendar year; subsequent requests in the same year may attract a reasonable administrative fee.

If you believe loveph has not adequately addressed a privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

Some of loveph's third-party service providers — particularly cloud infrastructure providers and game technology providers — may be located outside the Republic of the Philippines. Where personal data is transferred outside the Philippines, loveph ensures that appropriate safeguards are in place as required by Section 21 of RA 10173, including:

• Contractual clauses in data processing agreements that obligate the recipient to provide protections equivalent to Philippine privacy law.
• Transfer only to jurisdictions recognised by the NPC as providing adequate data protection, or where specific NPC-mandated transfer mechanisms are in place.
• Minimum data transfer principles — only the personal data strictly necessary for the service is transferred, with no additional data elements.

loveph does not transfer your personal data to countries or organisations that cannot demonstrate adequate data protection standards. All third-party service providers used by loveph undergo a data protection due diligence review before engagement.

loveph sends promotional communications — including SMS notifications about bonuses, new game launches, and platform promotions — only to players who have provided explicit consent to receive such communications. Consent is sought at registration and can be managed at any time through your account settings.

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your loveph account dashboard.
• Replying "STOP" to any loveph SMS.
• Contacting loveph support at [email protected] with a request to unsubscribe.

Withdrawing marketing consent does not affect service communications — loveph will continue to send account security alerts, transaction confirmations, KYC requests, and regulatory notifications regardless of marketing preference, as these are required for the operation of your account.

loveph does not share your contact details with third-party marketers. All promotional communications originate from loveph directly and relate exclusively to loveph products and platform updates.

In the event of a personal data breach — defined under RA 10173 as any incident that compromises the confidentiality, integrity, or availability of personal data — loveph will activate its incident response protocol immediately upon discovery.

loveph's data breach response obligations and procedures include:

• Containing the breach and preventing further exposure as the immediate priority.
• Assessing the scope and nature of the breach, the categories of data affected, the number of players impacted, and the likely consequences.
• Notifying the National Privacy Commission (NPC) within 72 hours of becoming aware of a notifiable breach, in accordance with NPC Circular 16-03.
• Notifying affected players as soon as practicable where the breach is likely to result in a real risk of serious harm, via their registered mobile number and, where available, email.
• Player notifications will describe: the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the steps loveph is taking or has taken to address the breach and mitigate its effects.
• Maintaining a written record of all breaches, including those not meeting the notification threshold, as required by the NPC.

If you suspect that your loveph account has been compromised — for example, you notice unfamiliar login activity or unexpected transactions — please contact loveph support immediately at [email protected] or via the 24/7 live chat. Our security team will investigate and secure your account within 30 minutes of a confirmed compromise report.

If you have a question, concern, or complaint about how loveph handles your personal data, please contact our Data Protection Officer in the first instance:

If loveph's response does not resolve your concern, you have the right to escalate the complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing RA 10173 and handling complaints about data privacy violations by organisations operating in the Philippines.

loveph will cooperate fully with any NPC investigation and will provide all records and documentation requested in connection with a privacy complaint within the timeframes specified by the NPC.

loveph may update this Privacy Policy from time to time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or loveph's data processing practices. Material changes — those that reduce your privacy rights, expand data collection, or alter sharing practices — will be notified to you via your registered mobile number or in-platform notification at least 7 calendar days before the change takes effect.

Non-material changes (such as clarifications, corrections, or updates to contact details) may take effect immediately upon publication. The current version of this Policy, including the "Last Updated" date at the top, is always available at loveph.one/privacy-policy.

Your continued use of the loveph Platform after an amendment's effective date constitutes your acceptance of the updated Privacy Policy. If you do not agree to a material change, you may close your account before the effective date by contacting loveph support.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the loveph Privacy Policy. All rights are reserved.