auperph
Privacy Policy

01 Overview

auperph is committed to protecting the privacy and personal data of every player on our platform. We understand that when you share personal information with us — whether during registration, during a GCash deposit, or when you contact our support team — you are placing your trust in us. We do not take that lightly.

This Privacy Policy is a full, transparent account of our data handling practices. It tells you precisely what personal data auperph collects from Filipino players, on what legal basis we process that data, who we share it with, how long we keep it, and what tools you have to control your own information. We have written this policy in plain, accessible English so that every auperph player — whether you are based in Makati, Cebu City, or Davao — can clearly understand how your data is handled.

Where this policy refers to "auperph", "we", "our", or "us", it means the auperph online gaming platform operating at auperph.net, including its parent company, subsidiaries, and designated data processing partners. Where it refers to "you", "your", or "player", it means any individual who registers for, accesses, or uses the auperph platform in any capacity.

This Privacy Policy should be read alongside the auperph Terms & Conditions and the auperph Responsible Gaming Policy, both of which form part of the overall agreement between you and auperph.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, auperph is the personal information controller (PIC) responsible for the personal data collected through the auperph platform.

As a PAGCOR-licensed online gaming operator, auperph is required to appoint a Data Protection Officer (DPO) and to register its data processing systems with the National Privacy Commission (NPC) of the Philippines. auperph's DPO oversees all data privacy compliance matters and is the primary point of contact for any data-related inquiries or complaints from Filipino players.

03 Data We Collect

auperph collects personal data from Filipino players through several channels: during account registration, during financial transactions, through platform usage, through communications with our support team, and through automated technical means such as cookies and device identifiers. The categories of personal data we collect are as follows:

auperph does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for KYC identity verification and AML compliance. We do not collect race, ethnicity, religion, health data, or political affiliation from our players.

04 How We Use Your Data

auperph uses the personal data we collect for the following specific purposes. We do not use personal data for any purpose that is incompatible with those listed below without first obtaining the player's explicit consent.

• Account Management: To create, maintain, verify, and manage your auperph player account, including processing your login credentials and maintaining your PHP wallet balance.
• KYC Compliance: To verify your identity and age (21+ requirement) in accordance with PAGCOR licensing requirements and Philippine gaming regulations.
• Payment Processing: To facilitate deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and to reconcile transaction records in Philippine Peso.
• AML Monitoring: To monitor transactions for suspicious activity and comply with Anti-Money Laundering Act of 2001 (RA 9160, as amended) obligations. Suspicious transactions must be reported to the Anti-Money Laundering Council (AMLC).
• PAGCOR Regulatory Reporting: To fulfil mandatory reporting obligations to the Philippine Amusement and Gaming Corporation, including player activity reports and compliance disclosures.
• Game Integrity: To ensure fair play, detect cheating, collusion, or exploitation of bonuses, and to maintain a secure gaming environment for all auperph players.
• Responsible Gaming: To provide responsible gaming tools such as deposit limits, cool-off periods, and self-exclusion, and to identify players who may be showing signs of problem gambling.
• Customer Support: To respond to your queries, complaints, and feedback submitted via live chat, email, or any other support channel.
• Marketing Communications: To send promotional offers, bonus alerts, and game updates to players who have opted in to receive such communications. You may opt out at any time via your account settings or by emailing our support team.
• Platform Improvement: To analyse usage data and player behaviour patterns to improve the auperph platform experience, game selection, and interface design.
• Fraud Prevention: To detect and prevent fraudulent account activity, unauthorised access, payment fraud, and identity theft.
• Legal Compliance: To comply with all applicable Philippine laws, court orders, and regulatory directives that require auperph to process or disclose personal data.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, auperph relies on the following lawful bases for processing your personal data:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary for auperph to perform its contractual obligations to you as a registered player — including maintaining your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing for KYC, AML monitoring, and PAGCOR regulatory reporting is required by Philippine law and PAGCOR licensing conditions. auperph has no discretion to waive these obligations.
• Legitimate Interests: Processing for fraud prevention, game integrity, security monitoring, and platform analytics is conducted on the basis of auperph's legitimate interests as a regulated gaming operator, balanced against your rights as a data subject.
• Consent: Processing for marketing communications and optional personalisation features is conducted on the basis of your freely given, informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

auperph does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your personal data only in the following carefully defined circumstances:

• PAGCOR: As a PAGCOR-licensed operator, auperph is required to share player data with the Philippine Amusement and Gaming Corporation upon request or as part of regular regulatory reporting. This is a statutory requirement that cannot be waived.
• Anti-Money Laundering Council (AMLC): Where auperph is required by law to file a Suspicious Transaction Report (STR) or a Covered Transaction Report (CTR), relevant player data will be disclosed to the AMLC as mandated under RA 9160.
• National Privacy Commission (NPC): auperph may be required to report personal data breaches or respond to NPC investigations involving player data under RA 10173.
• Payment Processors: Your financial data is shared with GCash, PayMaya, BPI, BDO, and Metrobank solely to the extent necessary to process your deposits and withdrawals. These payment partners operate under their own privacy policies and regulatory obligations.
• Game Providers: Certain technical data (such as session tokens and player identifiers) is shared with third-party game providers to deliver their games on the auperph platform. No directly identifiable personal data beyond what is technically required is shared with game providers.
• KYC / Identity Verification Partners: auperph uses accredited third-party identity verification services to conduct KYC checks. These partners process identity documents and verification results under strict data processing agreements.
• Law Enforcement: In the event of a lawful request from Philippine law enforcement authorities or a court order, auperph will disclose personal data as legally required.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of the auperph business, player data may be transferred to a successor entity, subject to the same privacy protections described in this policy.

07 Data Retention

auperph retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by Philippine law and PAGCOR regulatory obligations. The following retention periods apply:

After the applicable retention period expires, auperph will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual. Anonymised aggregate data (with no connection to individual players) may be retained for statistical and analytics purposes indefinitely.

08 Data Security

auperph implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes but is not limited to the following measures:

• Encryption: All data transmitted between your device and the auperph platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Data stored in auperph's systems is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to auperph staff and authorised service providers who require the data to perform their functions. Role-based access controls and multi-factor authentication are enforced across all internal systems.
• Firewalls & Intrusion Detection: auperph's platform infrastructure is protected by enterprise-grade firewalls, real-time intrusion detection systems, and 24/7 security monitoring.
• Payment Security: All GCash, PayMaya, BPI, BDO, and Metrobank transaction processing is handled through PCI-DSS compliant payment channels. auperph does not store full payment card numbers on its own servers.
• Penetration Testing: auperph conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in its platform infrastructure.
• Staff Training: All auperph staff with access to personal data undergo regular data privacy and information security training.

While auperph takes every reasonable step to protect your personal data, no online platform can guarantee 100% security against all threats. Players are also responsible for maintaining the security of their own auperph login credentials and for ensuring that they do not share account access with any third party.

09 Cookies Policy

auperph uses cookies and similar tracking technologies on the auperph platform to improve functionality, personalise your gaming experience, and support security and fraud prevention operations. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the auperph platform to function correctly. They enable core features such as account login sessions, PHP wallet operations, and security verification. These cookies cannot be disabled without breaking platform functionality.
• Analytics Cookies: We use analytics tools to understand how Filipino players use the auperph platform — which pages are visited most, which games are most popular, and how players navigate the site. This data is aggregated and anonymised where possible.
• Functional Cookies: These cookies remember your preferences — such as preferred language settings, responsible gaming tool configurations, and notification preferences — to deliver a more personalised auperph experience.
• Marketing Cookies: With your consent, auperph may use cookies to track your engagement with our promotional content and to serve relevant gaming offers. These cookies are only activated where you have opted in to marketing communications.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the auperph platform. For more granular cookie controls, auperph provides a cookie preference panel accessible from the footer of every page on the platform.

10 Minors & Age Verification

auperph operates exclusively for adults aged 21 and above, as required by PAGCOR regulations governing online gaming in the Philippines. The auperph platform is not directed at individuals under the age of 21, and we do not knowingly collect personal data from minors.

All new auperph accounts are subject to mandatory age verification as part of the KYC process. Players must submit valid Philippine government-issued identification confirming they are aged 21 or older before they are permitted to deposit, play, or withdraw.

Parents and guardians in the Philippines who believe a minor in their household may have accessed the auperph platform are encouraged to contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

11 Your Data Subject Rights

As a Filipino data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by auperph. These rights are not absolute — they are subject to exemptions where data processing is required by law or legitimate interests — but auperph will respond to all valid rights requests promptly and transparently.

• Right to Be Informed: You have the right to be informed about how auperph collects and processes your personal data. This Privacy Policy is the primary vehicle through which auperph fulfils this obligation.
• Right of Access: You have the right to request a copy of the personal data that auperph holds about you, including your account data, gaming history, transaction records, and support communications.
• Right to Rectification: If any of the personal data auperph holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain details directly via your auperph account profile.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to auperph's legal retention obligations under PAGCOR regulations and the Anti-Money Laundering Act.
• Right to Object: You have the right to object to auperph processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though auperph may override such objections where compelling legitimate grounds exist.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you may request that auperph provide your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: If you believe auperph has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Details of the NPC's complaint process are available on the NPC's official website.

12 Cross-Border Data Transfers

auperph's primary operations, data storage, and processing are conducted within the Philippines. However, certain third-party service providers — such as game platform providers and cloud infrastructure partners — may process personal data in servers located outside of the Philippines.

Where cross-border transfers of personal data occur, auperph ensures that adequate safeguards are in place in accordance with NPC requirements, including:

• Data processing agreements that bind overseas providers to data protection standards equivalent to RA 10173.
• Transfers only to jurisdictions or organisations that provide an adequate level of data protection as assessed by the NPC.
• Standard contractual clauses approved by the NPC where no adequacy decision exists.

auperph does not transfer your financial data (GCash, PayMaya, BPI, BDO, Metrobank records) outside of Philippine-regulated payment systems. Your payment data remains within the Philippine financial system at all times.

13 Changes to This Policy

auperph reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine law, PAGCOR regulatory requirements, NPC guidance, or our own data processing practices. When we make material changes to this policy, we will notify registered players through one or more of the following means: a notice displayed on the auperph platform, an email to the registered account email address, or an in-platform notification message.

The updated Privacy Policy will take effect from the date published on this page unless a specific future effective date is stated. We encourage all auperph players to review this Privacy Policy periodically to stay informed of how we protect their data. Your continued use of auperph following the publication of an updated Privacy Policy constitutes your acceptance of the changes.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way auperph handles your personal data, our Data Protection Officer and support team are available to assist you 24 hours a day, 7 days a week, on Philippine Standard Time (PST / UTC+8).

• Live Chat: Available directly on the auperph platform — average response time under 3 minutes.
• Email (DPO): [email protected] — use subject line "Data Privacy — DPO Request" for privacy-specific inquiries. Average response time under 2 hours.
• Data Subject Rights Requests: Email [email protected] with subject line "Data Subject Rights Request" and include your full name, registered email, and a description of your request.
• Complaints to the NPC: If your concern is not resolved by auperph's internal process, you may escalate to the National Privacy Commission of the Philippines via their official regulatory channels.