ernphp Privacy Policy

ernphp, operating the online gaming platform accessible at ernphp.net, is the Data Controller for personal data collected from players and users of the ernphp platform. As Data Controller, ernphp is responsible for determining the purposes and means of processing personal data submitted by Filipino players in connection with the use of ernphp services.

ernphp has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and this Privacy Policy. The DPO may be contacted via the details provided in Section 15 of this Policy.

ernphp collects the following categories of personal data from players:

2.1 Identity Data

• Full legal name as it appears on your government-issued Philippine identification document
• Date of birth (for age verification of the 21+ requirement)
• Government-issued ID type and number (e.g., Philippine Passport, UMID, Driver's License, PhilSys National ID)
• Selfie or live photo submitted for biometric identity verification where required

2.2 Contact Data

• Philippine mobile number (Globe, Smart, or Dito) used as the primary account identifier and for OTP delivery
• Email address, where voluntarily provided during registration or support interactions
• City or region of residence within the Philippines (e.g., Metro Manila, Cebu, Davao, Iloilo)

2.3 Financial Data

• GCash mobile number or Maya account reference associated with your ernphp deposits and withdrawals
• BPI, BDO, or Metrobank account name (but not full account numbers) where bank transfers are used
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment channel used
• Source of funds documentation submitted in connection with large withdrawals or AML verification

2.4 Gaming Activity Data

• Game session history, bet amounts, win/loss records, and bonus redemption activity
• Sports betting selections, stake amounts, and settlement records
• Responsible gaming tool configurations, including self-exclusion status and deposit limits set

2.5 Technical Data

• IP address and approximate geographic location at time of login and during sessions
• Device type, operating system, browser type and version
• Session duration and navigation data within the ernphp platform
• Cookie identifiers and similar tracking technologies as described in Section 9

2.6 Communications Data

• Records of customer support interactions, including live chat transcripts and support ticket contents
• SMS communications sent in connection with OTP verification and account alerts
• Promotional communication preferences and opt-out records

ernphp collects personal data through the following methods:

• Directly from you — when you register an ernphp account, submit identity verification documents, make deposits or withdrawal requests, contact our support team, or update your account settings.
• Automatically — through cookies, log files, and similar tracking technologies when you access or use the ernphp platform. See Section 9 for details on cookies.
• From third-party payment processors — GCash, Maya, and Philippine banking institutions provide transaction confirmation data to ernphp for the purpose of reconciling deposits and withdrawals.
• From identity verification services — ernphp may use licensed third-party identity verification providers to assist with age and identity verification for Philippine players. These providers process identity documents and biometric data in accordance with their own privacy policies and applicable Philippine law.
• From fraud prevention and AML services — ernphp may receive risk signals or screening results from licensed compliance screening providers in connection with its AML obligations under Republic Act No. 9160.

ernphp processes your personal data for the following specific purposes:

• Account registration and management — to create and maintain your ernphp account, verify your identity and age (21+), and authenticate your ernphp login sessions.
• Service delivery — to provide access to ernphp's gaming services, process game rounds, settle sports bets, manage bonuses, and deliver the full range of platform features.
• Payment processing — to process GCash, Maya, QR Ph, and bank transfer deposits and withdrawals, and to maintain accurate financial records of your account activity.
• Regulatory compliance — to comply with PAGCOR guidelines, Philippine AML obligations (RA 9160), the Data Privacy Act (RA 10173), and any other applicable legal or regulatory requirements.
• Responsible gaming — to monitor gaming activity for patterns associated with problem gambling, administer self-exclusion programs, and enforce responsible gaming limits set by players.
• Fraud prevention and security — to detect and prevent fraudulent transactions, account takeovers, duplicate account creation, bonus abuse, and other platform integrity violations.
• Customer support — to respond to your enquiries, resolve disputes, and manage support tickets submitted through ernphp's support channels.
• Platform improvement — to analyse aggregated, de-identified usage data to improve the ernphp platform, optimise game lobby layout, and develop new features relevant to Filipino players.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates where you have provided consent or where applicable law permits such communications to registered players. You may opt out at any time through your account settings.

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, ernphp processes personal data on the following legal bases:

• Consent — where you have provided explicit consent to specific processing activities, such as marketing communications or the use of non-essential cookies.
• Contract performance — processing necessary to perform the service agreement established when you register an ernphp account and accept the Terms and Conditions.
• Legal obligation — processing required to comply with applicable Philippine laws including AML obligations (RA 9160), PAGCOR regulatory requirements, and tax reporting obligations.
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.

ernphp does not sell your personal data. We may share your personal data with the following categories of recipients in the circumstances described:

• Payment processors — GCash (Mynt), Maya Philippines, BancNet, and Philippine banking partners receive transaction-specific data necessary to process your deposits and withdrawals.
• Identity verification providers — licensed KYC (Know Your Customer) service providers receive identity document images and biometric data for age and identity verification purposes only.
• Game studio providers — game studios operating games on the ernphp platform (e.g., Pragmatic Play, JILI, PG Soft) receive session-level data necessary for game delivery and fairness auditing. These providers do not receive your identity or contact data.
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine courts, and law enforcement agencies, where disclosure is required by law or regulatory mandate.
• Fraud and compliance screening services — licensed compliance screening providers receive data for AML and sanctions screening as required by RA 9160.
• Professional advisers — lawyers, auditors, and consultants engaged by ernphp who are bound by confidentiality obligations.

All third parties with whom ernphp shares personal data are required to process that data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable Philippine data protection laws.

ernphp retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory retention obligations. Specific retention periods are as follows:

• Account data and identity documents — retained for the duration of your ernphp account plus a minimum of five (5) years following account closure, in accordance with PAGCOR guidelines and AML record-keeping requirements under RA 9160.
• Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction, consistent with AML obligations and tax record-keeping requirements.
• Gaming activity records — retained for a minimum of two (2) years for dispute resolution purposes, and longer where required by regulatory mandate.
• Customer support records — retained for a minimum of two (2) years from the date of the support interaction.
• Marketing consent records — retained for the duration of your account and for a reasonable period following account closure or consent withdrawal, to demonstrate compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ernphp's data disposal procedures.

ernphp implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks posed by unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption of personal data in transit using TLS (Transport Layer Security) for all connections between players and the ernphp platform;
• Encryption at rest for sensitive personal data stored in ernphp's databases, including identity documents and financial records;
• Access controls limiting ernphp personnel access to personal data on a strict need-to-know basis, with audit logging of data access events;
• Multi-factor authentication requirements for ernphp administrative systems;
• Regular security assessments and penetration testing of the ernphp platform infrastructure;
• Employee training on data protection obligations and secure data handling procedures.

While ernphp takes these measures seriously, no system is completely immune to security risks. Players are encouraged to protect their own account security by using strong unique passwords and enabling two-factor authentication through their ernphp account settings.

ernphp uses cookies and similar tracking technologies to operate the platform, maintain login sessions, remember user preferences, and analyse platform usage. The following categories of cookies are used:

• Strictly necessary cookies — essential for the ernphp platform to function. These include session cookies that maintain your ernphp login state and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies — used to remember your preferences such as language settings and responsible gaming configurations. Disabling these cookies may affect your platform experience.
• Analytics cookies — used to collect aggregated, anonymised data about how Filipino players use the ernphp platform, enabling us to identify areas for improvement. These cookies do not identify individual players.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent ernphp from functioning correctly. ernphp does not use cookies for cross-site advertising tracking or for sharing data with third-party advertising networks.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), ernphp players have the following rights with respect to their personal data:

To exercise any of the above rights, please contact ernphp's Data Protection Officer using the contact details in Section 15. We will respond to verified requests within 15 business days. We may require proof of identity before processing your request.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

ernphp does not knowingly collect personal data from individuals under the age of 21. The ernphp platform is strictly for adults aged 21 and above, consistent with Philippine gambling age restrictions. If ernphp becomes aware that personal data has been collected from a person under 21, that data will be deleted and the associated account suspended immediately.

If you are a parent or guardian and believe that your child or a minor in your care has registered or attempted to register on the ernphp platform, please contact our support team immediately at the contact details in Section 15 so we can take appropriate action.

The ernphp platform does not contain links to external third-party websites. Where third-party game studios operate within the ernphp platform environment, their game interfaces may be governed by their own privacy policies. ernphp is not responsible for the data practices of third-party game studios operating within the platform, and players are encouraged to review the privacy policies of individual game providers where relevant.

Some of ernphp's service providers — including game studio partners and technical infrastructure providers — may process personal data outside the Republic of the Philippines. Where such international transfers occur, ernphp ensures that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act of 2012 and the NPC's rules on cross-border data transfers. These safeguards include contractual data processing agreements that impose data protection obligations equivalent to those required under Philippine law.

ernphp reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. Material changes to this Policy will be communicated to registered ernphp players via the platform or by notification to your registered Philippine mobile number at least 14 days before the changes take effect.

Your continued use of the ernphp platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how ernphp protects your personal data.

For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data rights under RA 10173, please contact the ernphp Data Protection Officer:

ernphp will acknowledge receipt of your request within five (5) business days and will endeavour to resolve privacy-related requests within fifteen (15) business days. For complaints that cannot be resolved directly with ernphp, you may refer the matter to the National Privacy Commission of the Philippines.