Privacy Policy

1. Introduction

This Privacy Policy explains how xoplay ("we," "us," "our," or "xoplay") collects, uses, discloses, and protects personal information from users ("you," "your," or "Player") of our online casino platform located at https://xoplay.cam (the "Platform"). We are committed to protecting your privacy and ensuring the security of your personal data in accordance with applicable data protection laws in the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

By accessing or using the xoplay Platform, creating an account, or providing us with your personal information, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal data as described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must immediately cease using our services and may not create or maintain an account with xoplay.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform. xoplay reserves the right to modify this Privacy Policy at any time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date above. Your continued use of xoplay following any changes constitutes acceptance of the revised Privacy Policy.

2. Information We Collect

xoplay collects various types of personal information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and deliver personalized gaming experiences. The information we collect includes:

2.1 Information You Provide Directly

When you register for an xoplay account or use our services, you voluntarily provide us with the following information:

• Account Registration Data: Full name, date of birth, gender, email address, mobile phone number, residential address, username, and password.
• Identity Verification Documents: Government-issued identification (e.g., Philippine passport, driver's license, national ID, UMID, SSS ID), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification purposes (KYC compliance).
• Payment Information: Bank account details, GCash or Maya account information, cryptocurrency wallet addresses, and transaction records associated with deposits and withdrawals.
• Communications: Messages, emails, live chat conversations, customer support inquiries, feedback, and survey responses you send to xoplay.
• Marketing Preferences: Your communication preferences regarding promotional emails, SMS notifications, and marketing materials.

2.2 Information Collected Automatically

When you access and use the xoplay Platform, we automatically collect certain information about your device and usage patterns:

• Device Information: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), unique device identifiers, and mobile network information.
• Usage Data: Pages visited, games played, bet amounts, win/loss records, session duration, click patterns, timestamps, referring/exit pages, and interaction with Platform features.
• Location Data: Approximate geographic location derived from your IP address to ensure compliance with jurisdictional gambling regulations.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar technologies (see Section 8 for detailed information about cookies).

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification, payment method validation, and fraud prevention data from GCash, Maya, banks, and cryptocurrency payment providers.
• Identity Verification Services: Document authentication and identity validation results from third-party KYC service providers.
• Fraud Prevention Services: Risk assessment data, blacklist checks, and fraud indicators from specialized security vendors.
• Affiliate Partners: Referral source information if you signed up through an affiliate link or promotional campaign.

3. How We Use Your Information

xoplay uses the personal information we collect for the following legitimate business purposes:

• Account Management: To create, maintain, and manage your xoplay account, process registrations, verify your identity, and authenticate your login credentials.
• Service Delivery: To provide access to casino games, process bets, calculate winnings, manage your balance, and deliver the core functionality of the Platform.
• Payment Processing: To process deposits and withdrawals, verify payment methods, prevent payment fraud, and maintain accurate financial records.
• Compliance and Security: To comply with legal obligations including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, age verification mandates, and gaming regulations. To detect and prevent fraud, unauthorized access, security breaches, and other illegal activities.
• Customer Support: To respond to your inquiries, resolve disputes, provide technical assistance, and communicate important account or service updates.
• Responsible Gaming: To implement responsible gaming tools, monitor gaming patterns that may indicate problem gambling, enforce deposit limits and self-exclusion requests, and provide resources for players experiencing gambling-related difficulties.
• Marketing and Promotions: To send promotional offers, bonuses, newsletters, tournament invitations, and personalized recommendations based on your gaming preferences (only with your consent, and you may opt out at any time).
• Platform Improvement: To analyze user behavior, identify technical issues, optimize Platform performance, develop new features, and enhance overall user experience.
• Legal Protection: To establish, exercise, or defend legal claims, enforce our Terms and Conditions, and protect the rights, property, and safety of xoplay, our users, and the public.

4. Legal Basis for Processing

Under Philippine data protection law, xoplay processes your personal information based on the following legal grounds:

• Consent: You have given explicit consent for processing your personal data for specific purposes, such as receiving marketing communications.
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you under the Terms and Conditions, including providing gaming services and processing payments.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC requirements, AML laws, tax reporting obligations, and gaming license conditions.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security protection, and platform improvement, provided these interests do not override your fundamental rights and freedoms.

5. Information Sharing and Disclosure

xoplay does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processors (GCash, Maya, banks, cryptocurrency gateways)
• Identity verification and KYC service providers
• Cloud hosting and data storage providers
• Customer support platform providers
• Email and SMS communication services
• Fraud detection and security vendors
• Analytics and performance monitoring tools

These service providers have access to your personal information only to the extent necessary to perform their functions and are contractually obligated to maintain confidentiality and security.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement, regulators, or courts when:

• Required by law, court order, subpoena, or legal process
• Necessary to comply with gaming regulations or licensing requirements
• Requested by the Philippine National Police, National Bureau of Investigation, or Anti-Money Laundering Council for investigations
• Required to report suspicious transactions or comply with AML obligations
• Necessary to protect our legal rights, enforce our Terms and Conditions, or defend against legal claims

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or surviving entity. We will notify you of any such change in ownership or control of your personal data.

5.4 With Your Consent

We may share your information with other third parties when you have given us explicit consent to do so.

6. Data Security and Protection

xoplay takes the security of your personal information seriously and implements industry-standard technical and organizational measures to protect against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Sensitive data stored in our databases is encrypted at rest.
• Access Controls: Access to personal information is restricted to authorized personnel only on a need-to-know basis. All employees with access to personal data are bound by confidentiality obligations.
• Network Security: Firewalls, intrusion detection systems, and regular security monitoring protect our network infrastructure from unauthorized access and cyberattacks.
• Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment gateways. xoplay does not store full credit card numbers or sensitive payment credentials.
• Regular Security Audits: We conduct periodic security assessments, vulnerability scans, and penetration testing to identify and address potential weaknesses.
• Incident Response: We maintain an incident response plan to quickly detect, contain, and remediate security breaches. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by law.

While we implement robust security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your login credentials and should not share your password with anyone. Please notify us immediately if you suspect unauthorized access to your account.

7. Data Retention

xoplay retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account and for 7 years after account closure to comply with financial record-keeping requirements and potential legal claims.
• Transaction Records: Retained for 7 years from the date of transaction for tax, accounting, and regulatory compliance purposes.
• KYC Documents: Retained for 7 years after the termination of the business relationship to comply with AML regulations.
• Communications: Customer support inquiries and communications are typically retained for 3 years unless longer retention is required for dispute resolution or legal purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, after which we will anonymize or delete the data within a reasonable timeframe.

After the applicable retention period expires, we will securely delete or anonymize your personal information. Anonymized data that cannot be used to identify you may be retained indefinitely for statistical and analytical purposes.

8. Cookies and Tracking Technologies

xoplay uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us remember your preferences and improve functionality.

Types of Cookies We Use:

Cookie Type	Purpose
Essential Cookies	Required for basic Platform functionality, including account authentication, session management, and security features. These cookies cannot be disabled.
Performance Cookies	Collect anonymous information about how visitors use our Platform, which pages are most popular, and if users encounter errors. This helps us optimize performance.
Functionality Cookies	Remember your preferences (language, currency, username) to provide a personalized experience across sessions.
Marketing Cookies	Track your browsing habits to deliver relevant advertisements and measure campaign effectiveness. These cookies may be set by our advertising partners.

You can control cookie settings through your browser preferences. Disabling cookies may limit your ability to use certain Platform features. For more information about managing cookies, visit your browser's help section.

9. Your Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure: You may request deletion of your personal information, subject to legal retention obligations and legitimate business needs.
• Right to Object: You may object to processing of your personal information for direct marketing purposes or based on legitimate interests.
• Right to Data Portability: You may request transfer of your personal information to another service provider in a structured, commonly used format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint: You may file a complaint with the Philippine National Privacy Commission if you believe your privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 12. We will respond to your request within 30 days or as required by applicable law. Please note that we may need to verify your identity before fulfilling certain requests.

10. Children's Privacy

xoplay services are strictly intended for individuals aged 21 years or older. We do not knowingly collect personal information from anyone under the legal gambling age. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information and close the associated account. Parents or guardians who believe their child has provided personal information to xoplay should contact us immediately.

11. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries outside the Philippines where our service providers and data centers are located. These countries may have different data protection laws than those in the Philippines. When we transfer your data internationally, we implement appropriate safeguards to ensure your information remains protected, including standard contractual clauses, adequacy decisions, and binding corporate rules. By using xoplay, you consent to the transfer of your information to these countries.

12. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: "Privacy Inquiry" or "Data Protection Request"
• Live Chat: Available 24/7 on the xoplay Platform

We will respond to all privacy-related inquiries within 30 calendar days or as required by applicable law.

13. Changes to This Privacy Policy

xoplay reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will notify you by posting a prominent notice on our Platform, sending an email notification, or through other appropriate communication channels. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.