1. Who We Are
000p is an online gaming and sports betting platform operated for Filipino players and accessible at 000p.app. When this Privacy Policy refers to "000p," "we," "us," or "our," it means the legal entity responsible for operating the 000p platform and processing the personal data of registered players and site visitors.
000p is the data controller for all personal data collected through the 000p platform. This means we determine why your data is collected and how it is used. Our Data Protection Officer (DPO) can be reached at the contact details at the bottom of this policy. If you have any questions about how your personal data is handled at 000p, the DPO is your first point of contact.
By registering an account or otherwise using the 000p platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, you should not register or continue using 000p.
2. Data We Collect
000p collects several categories of personal data in order to operate your account and deliver the gaming services you've signed up for. Here's a clear breakdown of what we collect and why each category is necessary:
| Category | Examples | Why Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number | Age verification, KYC compliance, anti-money laundering requirements |
| Contact Data | Mobile number, email address, home address | Account creation, OTP verification, transaction notifications, support communications |
| Financial Data | GCash number, Maya account, bank account details (last 4 digits only), transaction history | Processing deposits and withdrawals, fraud detection, regulatory reporting |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Platform security, fraud detection, service optimisation, regulatory compliance |
| Gameplay Data | Games played, bets placed, wins and losses, session duration, bonus usage | Game integrity, responsible gaming monitoring, service improvement, dispute resolution |
| Communication Data | Records of chat support conversations, email exchanges, complaints submitted | Quality assurance, dispute resolution, legal documentation |
| Marketing Preferences | Email opt-in/opt-out status, notification preferences | Sending promotional offers only to players who have consented |
What We Do NOT Collect
000p does not collect your full card numbers (only masked last-4-digit references are stored), your government ID document images unless specifically required for KYC verification, or any biometric data. We do not collect data from your device outside of what is needed to run the platform securely.
3. How We Collect Your Data
000p collects your personal data through the following channels, all of which are directly related to operating the platform for Filipino players:
- Registration: When you create a 000p account, you provide your name, mobile number, date of birth, and email address directly.
- Identity Verification (KYC): When you submit a government-issued ID for account verification, we collect and store the data necessary to confirm your identity.
- Deposits and Withdrawals: When you transact via GCash, Maya, BDO, BPI, or any other payment method, transaction metadata is collected automatically.
- Platform Usage: As you play games, place bets, navigate the site, or contact support, gameplay and technical data is recorded automatically by our systems.
- Cookies and Tracking Technologies: 000p uses cookies and similar technologies on the platform. See Section 8 for a full explanation of what cookies are used and why.
- Third-Party Verification Services: In some cases, 000p may use third-party identity verification services to cross-check information you provide. These services are contracted to strict data handling standards.
4. Why We Use Your Data
Every use of your personal data at 000p has a specific, legitimate purpose. We do not use your data for anything that isn't described here:
- Account management: Creating, maintaining, and securing your 000p account — including login authentication and password resets.
- Payment processing: Handling deposits and withdrawals in Philippine Peso via your chosen payment methods.
- Identity verification and KYC: Confirming that you are who you say you are, that you are over 18, and that your account is used by you alone — as required by Philippine anti-money laundering regulations.
- Fraud prevention and platform security: Detecting suspicious activity, preventing account takeovers, and protecting the integrity of the platform for all players at 000p.
- Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours and enabling our responsible gaming tools to function correctly.
- Customer support: Responding to your queries, resolving disputes, and improving the quality of our support service.
- Legal and regulatory compliance: Meeting our obligations under Philippine law, including reporting requirements to relevant regulatory authorities.
- Marketing communications: Sending promotional offers, bonus notifications, and news to players who have opted in — and only to those players.
- Platform improvement: Using aggregated, anonymised analytics to understand how the 000p platform is used and where it can be improved.
5. Legal Bases for Processing
Under the Philippine Data Privacy Act (RA 10173), 000p must have a valid legal basis for each category of data processing. Here are the bases we rely on:
- Contractual necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract you have with 000p — i.e., to operate your gaming account, process deposits, and pay out winnings.
- Legal obligation: Anti-money laundering compliance, age verification, and regulatory reporting are required by Philippine law. 000p is legally obligated to process certain data for these purposes regardless of individual consent.
- Legitimate interest: Fraud detection, platform security, gameplay monitoring for responsible gaming purposes, and aggregated analytics are processed under 000p's legitimate interest in operating a safe, fair platform — provided these interests are not overridden by your rights.
- Consent: Marketing communications are sent only on the basis of your explicit opt-in consent. You can withdraw this consent at any time, at no cost, and without affecting your ability to use the 000p platform.
6. Data Sharing and Third Parties
000p does not sell your personal data to any third party. Period. However, operating the platform requires us to share specific, limited data with certain third-party service providers and regulatory bodies. Here is a transparent account of who receives your data and under what conditions:
- Payment processors (GCash, Maya, BDO, BPI, etc.): Transaction data is shared with payment providers solely to process your deposits and withdrawals. These providers have their own privacy policies and are independently regulated.
- Identity verification providers: When enhanced KYC is required, we may use a contracted third-party verification service to cross-check identity documents. These providers operate under strict data processing agreements with 000p.
- Game content providers: Live casino game providers and slot game studios may receive anonymised gameplay session data as part of the technical integration. Personal identifiers are not shared with game providers without your explicit consent.
- Cloud infrastructure and hosting providers: 000p's platform is hosted on cloud infrastructure. Server providers process data on our behalf under binding data processing agreements and do not have independent access rights to your data.
- Regulatory authorities: As required by Philippine law, certain transaction data and identity information may be disclosed to AMLC, NPC, or PAGCOR upon valid legal request. 000p will notify you of such disclosures where legally permissible.
- Law enforcement: Where required by court order or valid legal process under Philippine law, 000p may disclose personal data to law enforcement authorities.
Data Sharing Safeguard
Every third party that receives 000p player data is contractually bound to use that data only for the purpose for which it was shared, to protect it with appropriate security measures, and to delete it when it is no longer needed for that purpose. 000p does not permit any third party to use your data for their own marketing or commercial purposes.
7. How Long We Retain Your Data
000p retains personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable Philippine law. Here's the general retention framework:
- Account data (active accounts): Retained for the lifetime of your account plus 5 years after closure, as required for anti-money laundering compliance under Philippine law.
- Transaction records: Financial transaction records are retained for a minimum of 5 years from the date of the transaction, in line with AMLC reporting requirements.
- KYC / identity verification documents: Retained for the duration of your account plus 5 years post-closure.
- Customer support communications: Retained for 3 years from the date of the last communication, to assist with dispute resolution and quality assurance.
- Marketing preference data: Retained until you withdraw consent or close your account, whichever comes first.
- Technical / log data: System logs and IP address records are retained for 12 months for security purposes, after which they are deleted or anonymised.
When data reaches the end of its retention period, 000p deletes it securely or anonymises it so that it can no longer be linked to you as an individual. Anonymised aggregated data may be retained indefinitely for analytics and platform improvement purposes.
8. Cookies and Tracking Technologies
000p uses cookies and similar technologies on the platform. A cookie is a small text file placed on your device when you visit the site. Cookies help the platform function correctly, stay secure, and improve your experience. Here's a breakdown of the types used at 000p:
You can manage cookies at any time through your browser settings. Disabling essential cookies will affect platform functionality. Disabling optional cookies will not affect your ability to play or transact at 000p.
9. Your Data Rights
As a Filipino data subject under RA 10173, you have specific rights over your personal data held by 000p. These rights are real and enforceable — here's what they mean and how to exercise them:
Right to Access
You can request a copy of all personal data 000p holds about you at any time. We will respond within 15 working days. This includes your account data, transaction history, gameplay records, and any communications held on file.
Right to Correction
If any personal data held by 000p is inaccurate or incomplete, you have the right to have it corrected. Update basic account details in your profile settings, or contact support for changes to verified identity data.
Right to Erasure
You can request deletion of your personal data when it is no longer needed for the purposes described in this policy. Note that some data must be retained to meet our legal obligations under Philippine AML law and cannot be deleted on request.
Right to Object
You can object to processing of your data based on legitimate interest. If you object, 000p will review whether the legitimate interest continues to justify the processing. You can always object to marketing processing — this takes effect immediately.
Right to Portability
You can request your personal data in a structured, machine-readable format. 000p will provide a CSV or JSON export of your account and transaction data within 15 working days of a valid request submitted to the DPO.
Right to Withdraw Consent
Where processing is based on your consent (such as marketing emails), you can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. Unsubscribe links are in every marketing email from 000p.
To exercise any of these rights, contact our Data Protection Officer at privacy@000p.app with the subject line "Data Subject Request." Requests are processed within 15 working days. If you are unsatisfied with 000p's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
10. Children's Privacy
000p is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. If 000p becomes aware that a player under 18 has registered an account, that account will be immediately closed, all funds will be returned to the depositing payment method, and any personal data collected will be deleted from our systems.
If you believe a minor has registered at 000p, please contact us immediately at support@000p.app so we can investigate and take action without delay. Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gaming platforms.
11. Security Measures at 000p
000p takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction:
- 256-bit SSL/TLS encryption on all data in transit between your device and 000p servers
- Encryption at rest for all sensitive personal data stored on 000p servers
- Two-factor authentication (2FA) available for all player accounts and mandatory for all internal staff accounts
- Regular penetration testing of platform infrastructure by independent security firms
- Role-based access controls — staff access to player data is strictly limited to what is necessary for their specific role
- 24/7 automated security monitoring with alerts for unusual access patterns or potential breach indicators
- Regular staff data privacy training to ensure all 000p team members understand their obligations under RA 10173
While 000p takes every reasonable measure to protect your data, no internet-based platform can guarantee absolute security. If you become aware of any security vulnerability or suspect your account has been compromised, please contact 000p support immediately.
12. Data Breach Response Protocol
In the event of a personal data breach at 000p — meaning any incident that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your personal data — 000p will:
- Contain the breach and assess its scope and severity within 24 hours of discovery
- Notify the National Privacy Commission within 72 hours of becoming aware of the breach, if there is a likely risk to the rights and freedoms of affected players
- Notify affected players directly — via the email address registered to their 000p account — as soon as reasonably practicable, with a clear description of what data was affected and what steps they should take
- Conduct a full post-incident review and implement corrective measures to prevent recurrence
Breach Notifications
If 000p ever needs to notify you of a data breach affecting your account, the notification will come from the official 000p email address to the address registered on your account. 000p will never ask you to click a link to "re-verify" your account in a breach notification — that pattern is a phishing red flag, not something 000p ever does.
13. Marketing Communications
000p only sends marketing communications — promotional offers, bonus notifications, new game alerts — to players who have explicitly opted in to receive them. This opt-in happens at the point of registration and can be updated at any time in your account settings.
Every marketing email from 000p contains a clearly visible unsubscribe link. Clicking it removes you from all marketing lists immediately. You can also opt out by:
- Updating your notification preferences in your 000p account settings
- Contacting support via live chat and requesting removal from marketing communications
- Emailing privacy@000p.app with "Unsubscribe" in the subject line
Opting out of marketing communications does not affect your ability to play, deposit, or withdraw at 000p. You will still receive transactional notifications — such as deposit confirmations, withdrawal processing alerts, and account security messages — as these are necessary to operate your account.
14. Third-Party Services and Links
The 000p platform may contain references or functional integrations with third-party services, such as payment processors (GCash, Maya) and game providers. These third parties operate under their own privacy policies, which are separate from and independent of this 000p Privacy Policy.
000p is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with 000p — particularly your chosen payment provider's privacy policy, as your transaction data will also be processed by them.
000p does not embed third-party advertising networks or social media tracking pixels on the platform. The only third-party scripts running on 000p are those directly necessary to provide platform functionality (payment gateways, game integrations, security tools).
15. Updates to This Privacy Policy
000p may update this Privacy Policy from time to time to reflect changes in the platform, in applicable Philippine law, or in our data practices. When material changes are made, we will notify registered players via email and via an in-platform notification at least 7 days before the changes take effect.
The "Last Updated" date at the top of this page always reflects when the current version was published. If you continue to use the 000p platform after a Privacy Policy update takes effect, that constitutes your acceptance of the revised policy. If you disagree with any changes, you may close your account before the effective date.
All previous versions of this Privacy Policy are available on request from the 000p Data Protection Officer — contact details below.
16. Contact Our Data Protection Officer
For any privacy-related queries, data subject requests, or concerns about how 000p handles your personal data, contact our Data Protection Officer directly:
NPC Complaints
If you are unsatisfied with 000p's response to your privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the government body responsible for enforcing RA 10173 and protecting the data privacy rights of all Filipinos.