Aryan Play Privacy Policy – How We Protect Your Personal Data

Aryan Play is an online gaming platform operating under a valid licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR). We provide casino games, sports betting, card games, and related entertainment services to registered players based in the Philippines through the website aryanplay.net and its associated mobile interface.

As the operator of the platform, Aryan Play acts as the Personal Information Controller under the Philippine Data Privacy Act. This means we determine the purposes and means by which your personal data is processed. We have appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the DPA and handling player data requests and concerns.

Aryan Play collects only the personal data that is necessary for the legitimate operation of your account and compliance with regulatory obligations. Below is a breakdown of the categories of data we collect:

Aryan Play collects personal data through several channels:

• Direct from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, respond to surveys, or participate in promotions. The information you provide directly is the primary source of your personal data on the platform.
• Automatically during use: When you access and use the Aryan Play platform, we automatically collect technical data such as your IP address, device identifiers, browser type, pages visited, and session activity. This collection happens through standard web server logs, cookies, and analytics tools.
• From payment processors: When you transact via GCash, Maya, GrabPay, or a Philippine bank, our payment processing partners provide us with transaction confirmations and limited account reference data needed to reconcile your deposits and withdrawals. Full financial account details remain with your payment provider.
• From identity verification services: Where required for KYC compliance, Aryan Play may use third-party identity verification services to validate the authenticity of documents you submit. These services return a verification result to us — they do not retain your documents independently of their contractual obligations to Aryan Play.

Under the Philippine Data Privacy Act of 2012, Aryan Play processes your personal data based on the following lawful grounds:

• Contractual necessity: Processing your identity, contact, and payment data is necessary for Aryan Play to provide you with the services described in our Terms and Conditions — your account, your deposits, your withdrawals, and your access to games.
• Legal and regulatory obligation: As a PAGCOR-licensed operator, Aryan Play is legally required to verify player identities, maintain transaction records, conduct anti-money laundering checks, and report certain activities to regulatory authorities. This processing is mandatory and cannot be opted out of while you hold an active account.
• Legitimate interests: We process technical and gameplay data on the basis of our legitimate interests in maintaining platform security, preventing fraud, improving our services, and protecting Aryan Play and its players from harm. These interests have been balanced against your privacy rights and do not override them.
• Consent: For optional communications such as promotional emails or SMS updates about Aryan Play offers, we rely on your explicit consent. You may withdraw this consent at any time by updating your communication preferences in your account settings.

Aryan Play uses your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and deliver the full range of games and betting services available on the platform.
• Payment processing: To process deposits and withdrawals accurately and securely via GCash, Maya, Philippine banks, and other supported local payment methods. Transaction records are maintained as required by PAGCOR and anti-money laundering regulations.
• Regulatory compliance and KYC: To fulfil our obligations under PAGCOR's licensing conditions, including know-your-customer (KYC) verification, age verification, and anti-money laundering (AML) screening. Players who do not complete KYC may have withdrawal functionality restricted.
• Security and fraud prevention: To monitor accounts for suspicious activity, investigate potential fraud, prevent unauthorised access, and protect the integrity of the Aryan Play platform for all players.
• Responsible gaming: To apply and monitor the responsible gaming tools you set — deposit limits, session timers, self-exclusion — and to identify patterns that may indicate problematic gambling behaviour so that appropriate support can be offered.
• Customer support: To respond to your queries, resolve disputes, and improve our support processes using aggregated and anonymised interaction data.
• Platform improvement: To analyse how players use the Aryan Play platform at an aggregated level and to improve game selection, interface design, performance, and overall user experience.
• Marketing communications (with consent): To send you information about Aryan Play promotions, new games, and special offers via email or SMS, where you have given your consent to receive such communications. You can opt out at any time.

Aryan Play does not sell, rent, or trade your personal information to third parties. We share your data only in the following limited circumstances, and only to the extent necessary for each purpose:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, and our banking partners receive only the transaction data necessary to process your deposits and withdrawals. They operate under their own privacy policies and financial data security standards.
• Identity verification providers: Third-party KYC providers who assist in verifying the authenticity of identity documents submitted during account verification. These providers are contractually bound to handle your data securely and not to retain or use it beyond the verification service.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where we are legally required to disclose information as part of our PAGCOR licence obligations or in response to a lawful order.
• Fraud and security services: Specialist third-party fraud prevention and cybersecurity partners who help us monitor for suspicious activity, protect accounts from unauthorised access, and maintain platform integrity.
• Technology and infrastructure providers: Cloud hosting, data storage, and platform technology vendors who process data on our behalf under strict data processing agreements that prohibit independent use of your data.

All third parties with whom Aryan Play shares personal data are required by contract to implement appropriate technical and organisational security measures and to process data only for the specified purpose. Aryan Play remains responsible for ensuring these partners handle your data in accordance with the Philippine Data Privacy Act.

Aryan Play uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us provide a better experience and maintain session security.

• Essential cookies: Required for the platform to function correctly. These include session management cookies that keep you logged in during a gaming session and security cookies that help prevent CSRF attacks. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming tool settings. Disabling these cookies may affect your experience.
• Analytics cookies: Help us understand how players navigate the platform at an aggregated, anonymised level — which pages are visited most, where users encounter difficulty, and how to improve the interface. We use a privacy-respecting analytics setup that does not profile individual players.
• Security and fraud detection: Device fingerprinting and behavioural tracking used to detect bot activity, account takeover attempts, and multi-account violations. This is a legitimate interest processing activity essential to platform security.

You can manage cookie preferences through your browser settings. Blocking all cookies will prevent you from logging into the Aryan Play platform. For a balanced approach, blocking only third-party cookies generally has minimal impact on your gaming experience.

Aryan Play implements a layered security approach to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption: All data in transit between your device and Aryan Play's servers is encrypted using industry-standard TLS 1.2/1.3 with 256-bit encryption — the same standard used by Philippine banks.
• Data at rest encryption: Sensitive personal data stored in our databases is encrypted at rest. This means even in the event of a server-level breach, your data remains unreadable without the encryption keys.
• Access controls: Employee access to personal data is restricted on a strict need-to-know basis. Staff with access to player data undergo data privacy training and are bound by confidentiality obligations.
• Two-factor authentication: Available for all player accounts and mandatory for administrative access. We strongly recommend all Aryan Play players enable two-factor authentication in their account settings.
• Incident response: Aryan Play maintains a data breach response plan. In the event of a personal data breach that is likely to affect your rights, we will notify affected players and the National Privacy Commission within the timeframes required by the Philippine Data Privacy Act.

Aryan Play retains your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable Philippine law and our PAGCOR licence obligations.

• Active accounts: Your personal data is retained for the full duration of your account being open. This includes identity, contact, financial, and gameplay data.
• After account closure: Following the closure of your account, Aryan Play is required under PAGCOR regulations and anti-money laundering rules to retain transaction records and identity verification data for a minimum of five (5) years from the date of account closure. After this period, data is securely deleted or anonymised.
• Support communications: Customer support records are retained for three years from the date of the interaction to support dispute resolution and quality improvement.
• Anonymised analytics: Platform usage data that has been fully anonymised and cannot be re-identified is retained indefinitely for aggregate analysis and historical reporting purposes.

Where you request deletion of your personal data, Aryan Play will delete or anonymise data that we are not legally required to retain. Data subject to regulatory retention obligations cannot be deleted earlier than the legally required retention period.

As a Filipino player, you have the following rights under Republic Act No. 10173. Aryan Play is committed to honouring these rights and processing requests promptly.

Aryan Play is strictly an adults-only platform. The minimum age to register and play is 21 years old, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

Our registration process includes age verification steps designed to prevent minors from accessing the platform. If Aryan Play becomes aware that a person under 21 has registered an account and provided personal data, we will immediately close the account, delete the associated personal data, and return any funds to the payment source used for deposits.

If you believe a minor may have registered an account on Aryan Play, please contact our support team or DPO immediately so we can take appropriate action.

The Aryan Play platform may contain references or internal links to other sections and features of the platform. We do not link to external third-party websites, and our policy applies only to data processed by Aryan Play directly and by our authorised processors acting on our behalf.

The payment platforms you use to deposit and withdraw — such as GCash and Maya — operate independently under their own privacy policies. Aryan Play is not responsible for the privacy practices of those platforms. We recommend reviewing the privacy policies of any payment provider you use in connection with your Aryan Play account.

Aryan Play reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, regulatory requirements, or industry standards. The effective date at the top of this page reflects the most recent update.

For significant changes that materially affect your rights or how your data is used, Aryan Play will notify registered players by email or through an in-platform notification at least 7 days before the changes take effect. For minor or clarifying updates, the revised policy will be posted on this page with an updated effective date.

Your continued use of the Aryan Play platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you may request to close your account in accordance with our Terms and Conditions.

For any questions, concerns, or requests related to your personal data and privacy rights at Aryan Play, please contact our Data Protection Officer:

• Privacy & Data Rights Requests: privacy@aryanplay.net
• General Support: support@aryanplay.net
• Live Chat: Available 24/7 through your logged-in account dashboard — for urgent data concerns, live chat ensures the fastest response.
• FAQ: Visit our FAQ page for quick answers to common privacy and account questions.

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the Philippine government authority responsible for enforcing the Data Privacy Act of 2012 and protecting the rights of Filipino data subjects.