12starph Privacy Policy

1. Introduction

12starph ("12starph," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the 12starph platform at https://12starph.vip (the "Platform"). This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you access or use the Platform, including when you register an account, make deposits or withdrawals, play games, or contact our support team.

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines, and the implementing rules and regulations issued by the National Privacy Commission (NPC). By using the 12starph Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Data We Collect

12starph collects the following categories of personal data from players and visitors to the Platform:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by applicable law or regulation (for example, problem gambling self-exclusion records).

3. How We Collect Your Data

12starph collects your personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server logs.
• Third-Party Sources: Identity and fraud-check data received from KYC verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), and regulatory databases such as PAGCOR exclusion lists.
• Publicly Available Sources: Information from public records or publicly accessible databases where relevant to fraud prevention or regulatory compliance.

4. How We Use Your Data

12starph uses your personal data for the following purposes:

• Account Management: To register and maintain your 12starph player account, verify your identity and age, and manage your account settings and preferences.
• Transaction Processing: To process deposits and withdrawals in Philippine Peso via your chosen payment method, and to maintain accurate records of all financial transactions.
• Service Delivery: To provide access to casino games, sports betting, live dealer games, and all other features of the 12starph Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct in connection with the Platform.
• Regulatory Compliance: To comply with our obligations under Philippine law, PAGCOR regulations, and the Data Privacy Act of 2012, including record-keeping and reporting requirements.
• Responsible Gaming: To monitor gaming behaviour, identify players who may be at risk of problem gambling, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the 12starph Platform.

5. Legal Basis for Processing Your Data

12starph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our contract with you, including account registration, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable Philippine law, PAGCOR regulations, anti-money laundering requirements, and NPC directives.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent, including for marketing communications and certain cookie-based tracking. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

12starph does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank, for the purpose of processing your deposits and withdrawals in Philippine Peso.
• KYC and Identity Verification Providers: Third-party providers engaged to verify your identity, age, and the authenticity of documents submitted during account registration or withdrawal processing.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where disclosure is required by law or regulation.
• IT and Platform Service Providers: Cloud hosting, cybersecurity, and technical support providers engaged by 12starph to operate and maintain the Platform, subject to strict data processing agreements.
• Professional Advisers: Lawyers, auditors, and accountants engaged by 12starph, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 12starph's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7. Cookies & Tracking Technologies

12starph uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies may be set when you visit 12starph:

• Strictly Necessary Cookies: Essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymised data about how players use the Platform, such as pages visited and error messages encountered, to help us improve performance.
• Functional Cookies: Remember your preferences, such as language settings and game history, to provide a more personalised experience.
• Analytics Cookies: Used to analyse aggregate usage patterns and measure the effectiveness of Platform features and promotions.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 12starph Platform. By continuing to use the Platform after being presented with our cookie notice, you consent to our use of non-essential cookies.

8. Data Retention

12starph retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine anti-money laundering regulations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Support Communications: Retained for three (3) years from the date of the communication, or longer if relevant to an ongoing dispute or investigation.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation purposes.

When personal data is no longer required, 12starph will securely delete or anonymise it in accordance with our data destruction procedures.

9. Data Security

12starph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-Bit SSL Encryption: All data transmitted between your device and the 12starph Platform is encrypted using industry-standard TLS/SSL protocols.
• Secure Data Storage: Personal and financial data is stored on secure, access-controlled servers with regular security audits and penetration testing.
• Access Controls: Access to personal data is restricted to authorised 12starph personnel and service providers on a strict need-to-know basis.
• Two-Factor Authentication: 12starph supports two-factor authentication (2FA) for player accounts to provide an additional layer of login security.
• Incident Response: 12starph maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights, we will notify the NPC and affected players in accordance with applicable law.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 12starph:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, and shared — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data 12starph holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified data subject requests within thirty (30) days, as required by the Data Privacy Act.

11. Children's Privacy

The 12starph Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. 12starph does not knowingly collect personal data from individuals under the age of 21.

If 12starph becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please notify us immediately at [email protected].

12. Third-Party Links

The 12starph Platform does not contain links to third-party websites. All navigation links on the Platform direct you to pages within the 12starph domain. 12starph is not responsible for the privacy practices of any external websites that you may access independently.

13. Policy Updates

12starph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Privacy Policy, 12starph will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of the 12starph Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 12starph, please contact our Data Protection Officer: