At istarph, your privacy is not an afterthought — it is a core commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a Filipino player under the Data Privacy Act of 2012 (Republic Act No. 10173).
istarph fully complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Your personal data is handled with the highest standard of care required by Philippine law.
All data transmitted between your device and istarph's servers is protected using TLS 1.3 encryption. Sensitive account data including passwords and payment details are stored using industry-standard hashing and encryption protocols.
As a registered istarph player, you have the right to access, correct, delete, and port your personal data. You may also object to certain types of processing. Exercise your rights anytime by contacting our Data Protection Officer.
istarph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data is shared only with trusted service providers under strict contractual obligations, or as required by PAGCOR regulations and Philippine law.
istarph uses cookies and similar tracking technologies solely to improve your gaming experience, maintain your session, and analyse platform performance. You can manage your cookie preferences through your browser settings at any time.
You are always in control of your marketing preferences. istarph will only send you promotional communications if you have opted in. You can withdraw your consent and unsubscribe from all marketing emails at any time through your account settings.
Section 01
istarph is an online gaming platform operating under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). The istarph platform is accessible at istarph.com and provides Filipino players with a range of online gaming products including live dealer casino games, slot games, bingo, Golden Bank, and Ganesh Gold.
For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, istarph acts as the Personal Information Controller (PIC) in respect of the personal data you provide when using our platform. This means istarph determines the purposes and means of processing your personal data.
istarph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact our DPO directly using the details provided in Section 14 of this Policy.
Section 02
istarph collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include the following:
When you create an istarph account, we collect information necessary to establish and verify your identity, including:
Section 03
istarph collects your personal data through the following means:
The majority of personal data istarph holds about you is provided directly by you when you:
When you access and use the istarph platform, certain technical data is collected automatically through cookies, log files, and similar technologies. This includes your IP address, device information, browser type, session data, and pages visited. Please refer to Section 7 for full details on our use of cookies and tracking technologies.
In limited circumstances, istarph may receive personal data about you from third parties, including:
Section 04
istarph uses your personal data for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity data, contact data, account data |
| Identity verification (KYC) and age verification (21+) | Identity data, government ID documents |
| Processing deposits and withdrawals | Financial data, identity data |
| Providing gaming services and personalising your experience | Gaming activity data, account data |
| Customer support and dispute resolution | Identity data, contact data, gaming activity data |
| Fraud prevention and security monitoring | Technical data, financial data, identity data |
| Anti-money laundering (AML) compliance | Financial data, identity data, transaction data |
| Responsible gaming monitoring and intervention | Gaming activity data, responsible gaming settings |
| Regulatory reporting to PAGCOR and AMLC | Identity data, financial data, gaming activity data |
| Marketing communications (with your consent) | Contact data, gaming activity data |
| Platform analytics and improvement | Technical data, gaming activity data (anonymised) |
Section 05
Under the Data Privacy Act of 2012, istarph processes your personal data on the following legal bases:
Processing is necessary for the performance of the contract between you and istarph — specifically, to provide you with access to the istarph gaming platform, process your transactions, manage your account, and deliver customer support. Without this processing, istarph cannot provide its services to you.
istarph is required by Philippine law and PAGCOR regulations to process certain personal data. This includes identity verification under KYC requirements, transaction monitoring and reporting under the Anti-Money Laundering Act (AMLA), age verification to ensure compliance with the 21+ restriction, and regulatory reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC).
istarph processes certain data on the basis of its legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms.
Where istarph relies on your consent as the legal basis for processing — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. You can manage your consent preferences through your account settings or by contacting our DPO.
Section 06
istarph does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only in the following limited circumstances:
istarph engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include:
All service providers are contractually required to process your data only on istarph's instructions and to maintain appropriate security measures.
istarph may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required by Philippine law, including:
In the event of a merger, acquisition, or sale of all or substantially all of istarph's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.
Section 07
Cookies are small text files placed on your device when you visit the istarph platform. They allow the platform to recognise your device, maintain your session, remember your preferences, and collect analytical data about how the platform is used.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for platform operation — session management, login authentication, security tokens | Session |
| Functional | Remember your preferences such as language, game settings, and responsible gaming limits | Up to 12 months |
| Analytical | Collect anonymised data on platform usage to help us improve performance and user experience | Up to 24 months |
| Security | Detect and prevent fraudulent activity, bot access, and suspicious login attempts | Session to 30 days |
You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling strictly necessary cookies will affect the functionality of the istarph platform and may prevent you from logging in or accessing certain features.
Section 08
istarph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | PAGCOR regulatory requirement |
| KYC documents | Duration of account + 5 years after closure | AMLA and PAGCOR requirement |
| Financial transaction records | 5 years from transaction date | AMLA requirement |
| Gaming activity logs | 3 years from session date | Legitimate interests / regulatory |
| Customer support records | 3 years from last interaction | Legitimate interests |
| Marketing consent records | Until consent withdrawn + 3 years | Legal obligation (proof of consent) |
| Technical / device logs | 90 days (security logs: 12 months) | Legitimate interests (security) |
Upon expiry of the applicable retention period, istarph will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes.
Section 09
istarph takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
Section 10
Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights in relation to your personal data held by istarph. These rights may be exercised by contacting our Data Protection Officer using the details in Section 14.
istarph will respond to all data subject rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case you will be notified of the extension and the reasons for it. istarph will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.
Section 11
The istarph platform is strictly restricted to individuals who are 21 years of age or older, in accordance with PAGCOR regulations and applicable Philippine law. istarph does not knowingly collect personal data from any person under the age of 21.
During the registration process, istarph requires all applicants to confirm that they are at least 21 years old and to submit a valid government-issued identification document for age verification. Any account found to belong to a person under 21 years of age will be immediately closed, all deposits returned, and all winnings forfeited.
Section 12
istarph may send you promotional emails, SMS messages, and in-platform notifications about new games, bonuses, promotions, and platform updates. We will only send you marketing communications if you have explicitly opted in to receive them during registration or through your account settings.
You can withdraw your consent to receive marketing communications at any time by:
Please note that even if you opt out of marketing communications, istarph will continue to send you transactional and service-related communications that are necessary for the operation of your account. These include deposit and withdrawal confirmations, security alerts, account verification notices, and important updates to our Terms & Conditions or Privacy Policy.
Section 13
istarph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or the features and services offered on the istarph platform.
When we make material changes to this Privacy Policy, we will notify you by:
The updated Privacy Policy will take effect on the date indicated at the top of the document as the "Effective Date." Your continued use of the istarph platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use of the platform and may request closure of your account.
We encourage you to review this Privacy Policy periodically to stay informed about how istarph protects your personal data. The most current version of this Privacy Policy will always be available at istarph.com/privacy-policy.
Section 14
If you have any questions, concerns, or requests relating to this Privacy Policy or the way istarph processes your personal data, you may contact our Data Protection Officer (DPO) using the following details:
Data Protection Officer — istarph
istarph aims to respond to all privacy-related enquiries within five (5) business days. For formal data subject rights requests, the response period is thirty (30) days as described in Section 10.
If you are not satisfied with istarph's handling of your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters under the Data Privacy Act of 2012.
Now that you know exactly how istarph handles your personal data, you can play with full confidence. Join thousands of Filipino players enjoying live dealer games, slots, bingo, Golden Bank, and Ganesh Gold — all on a platform built with your security and privacy at its core. 21+ only. Please play responsibly.
By registering you confirm you are 21 years of age or older and agree to istarph's Terms & Conditions and Privacy Policy.