kingpg Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected and processed by kingpg in connection with the kingpg website (kingpg.one), its mobile-optimised interface, customer support channels, and all related services (collectively, "the Platform"). It applies to all registered users, prospective users who visit the Platform without registering, and any other individuals whose personal data kingpg may lawfully process in connection with Platform operations.

This Policy should be read alongside the kingpg Terms and Conditions, which govern your use of the Platform generally. By using the kingpg Platform or registering an account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein, to the extent that consent is the applicable legal basis for processing.

This Policy is written in plain, accessible English to ensure that Filipino players can understand how their data is handled. Where legal terms are used, they correspond to the definitions established in the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR).

For the purposes of Philippine data protection law, kingpg acts as the Personal Information Controller (PIC) with respect to the personal data of its registered users and Platform visitors. As PIC, kingpg determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Data Privacy Act of 2012 and all applicable PAGCOR data governance requirements.

Where kingpg engages third-party service providers (such as payment processors, game providers, or cloud infrastructure vendors) to process personal data on its behalf, those parties act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with kingpg's instructions and this Policy.

kingpg operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and processes data in compliance with PAGCOR's data governance and anti-money laundering frameworks, in addition to the Data Privacy Act.

kingpg collects personal data across the following categories:

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Gender (optional, used for account personalisation)
• Nationality and country of residence
• Username selected during registration

• Email address (used for account communications, password reset, and promotional messages where consent has been given)
• Philippine mobile number (used for OTP verification, two-factor authentication, and SMS notifications)

• Scanned or photographed copy of a valid Philippine government-issued photo ID (PhilSys National ID, passport, driver's license, UMID, SSS card, or equivalent)
• Selfie or live photograph for facial verification purposes, where required
• Proof of payment method (e.g., screenshot of GCash or Maya account showing name and number)

• Deposit amounts, dates, and payment methods used
• Withdrawal requests, amounts, and destination payment account references
• Wallet balance history and transaction logs
• GCash or Maya account reference numbers associated with transactions (not full account credentials)

• Game session data — games played, wager amounts, win/loss results, session duration
• Sports bets placed — markets, selections, stake amounts, settlement outcomes
• Bonus redemptions, wagering requirement progress, and promotional participation history

• IP address at the time of each login and transaction
• Device type, operating system, and browser information
• Session timestamps and login history
• Geolocation data (city/region level, derived from IP) — used for regulatory compliance and fraud prevention

• Live chat transcripts, email correspondence, and support ticket content relating to your Account
• Feedback and survey responses submitted voluntarily

kingpg collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, place a wager, contact support, or voluntarily submit information through any Platform feature.
• Automatically: through cookies, session tracking, and server logs when you access and navigate the Platform — including IP address, device information, and page interaction data.
• From payment processors: when you initiate a deposit or withdrawal, the relevant payment gateway (GCash, Maya, BPI, BDO, ECPay, or Coins.ph) confirms transaction reference details to kingpg for reconciliation and fraud monitoring purposes.
• From third-party identity verification providers: where kingpg uses automated KYC or document verification tools, these providers may return verification status and risk scores to kingpg alongside the documents you submit.
• From public sources: kingpg may cross-reference publicly available information (such as government watchlists relevant to AML compliance) as part of its due diligence processes.

Under the Data Privacy Act of 2012, kingpg processes personal data on the following legal bases:

kingpg uses your personal data for the following specific purposes:

• Account management: creating, maintaining, verifying, and, where necessary, suspending or closing your kingpg Account.
• Identity verification (KYC): confirming your identity and age (21+) before enabling full Platform access, in compliance with PAGCOR licensing conditions.
• Payment processing: executing deposits and withdrawals, reconciling transactions, and investigating any payment disputes.
• Fraud prevention and security: detecting unauthorised access, duplicate accounts, bonus abuse, and suspicious transaction patterns that may indicate fraud or money laundering.
• Regulatory compliance: meeting obligations under the Anti-Money Laundering Act, PAGCOR's operational requirements, and any lawful request from Philippine government authorities.
• Customer support: handling your inquiries, complaints, and requests effectively with full context of your account history where necessary.
• Responsible gaming: monitoring gaming behaviour for indicators of problem gambling, and delivering deposit limit, self-exclusion, and cooling-off features as required by regulation.
• Personalisation: customising the games and promotions displayed in your lobby based on your gaming history, where you have not opted out of this feature.
• Marketing: sending promotional offers, bonus notifications, and platform updates by email or SMS, subject to your communication preferences and where lawful consent has been obtained. You may unsubscribe at any time.
• Platform analytics and improvement: using aggregated and anonymised data to understand how the Platform is used, identify technical issues, and improve user experience.

kingpg does not sell or rent personal data to third parties. We may share your data only in the following specific circumstances:

• Payment processors and e-wallet providers: GCash, Maya, BPI, BDO, ECPay, Coins.ph, and USDT gateway operators receive only the transaction data necessary to execute your deposit or withdrawal.
• KYC and identity verification providers: where kingpg uses third-party document verification tools, your submitted ID documents and personal details are shared with those providers solely for the purpose of verification.
• Game providers: JILI, Pragmatic Play, PG Soft, Evolution Gaming, Habanero, Spadegaming, and other game software providers receive only the data necessary to facilitate your game sessions (e.g., session token, currency, and stake amounts). They do not receive your full identity or payment data.
• Cloud and infrastructure providers: kingpg's servers and databases are hosted with enterprise-grade cloud providers bound by data processing agreements that restrict use of your data to infrastructure provision only.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies may receive data where legally required — for example, in response to a court order, suspicious transaction report, or formal regulatory inquiry.
• Professional advisors: legal counsel, auditors, and compliance consultants may access account and transaction data under strict confidentiality obligations in connection with their professional services to kingpg.
• Business transfers: in the event of a merger, acquisition, or sale of substantially all of kingpg's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

kingpg uses cookies and similar tracking technologies (including session tokens, local storage, and web beacons) to operate the Platform, remember your preferences, maintain your login session, and collect analytics data that helps us improve the user experience.

• Strictly Necessary Cookies: Required for the Platform to function — including authentication tokens that keep you logged in, session management cookies, and security cookies that detect fraudulent login attempts. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your language preference, display settings, and recently played games. These enhance your experience but are not essential to core operation.
• Analytics Cookies: Collect anonymised data about how users navigate the Platform — which pages are visited most, how long sessions last, and where users encounter errors. This data is used in aggregate to improve the Platform and is not linked to individual identities.
• Marketing Cookies: Used where you have consented to personalised promotions — these cookies help kingpg display relevant bonus offers based on your gaming activity. You may opt out of marketing cookies in your Account settings.

You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. Disabling other cookie types will reduce certain personalisation features but will not prevent access to core services.

kingpg retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as is required by applicable Philippine law. The following retention guidelines apply:

• Active account data: retained for the duration of your active Account relationship with kingpg, plus a minimum of five (5) years following Account closure, in compliance with PAGCOR data retention requirements and AMLA obligations.
• KYC documents: retained for a minimum of five (5) years from the date of submission, consistent with AMLA's record-keeping requirements. Copies of identity documents are stored securely with access restricted to authorised compliance staff.
• Transaction records: retained for a minimum of five (5) years in compliance with AMLA and PAGCOR financial record-keeping rules. Transaction logs are stored in encrypted form.
• Customer support communications: retained for three (3) years from the date of last communication, unless the relevant inquiry relates to a dispute that is subject to ongoing proceedings, in which case retention continues until resolution.
• Marketing data: retained until you withdraw consent to receive marketing communications, after which it is deleted within 30 days.
• Technical and device logs: retained for up to twelve (12) months in active systems, then archived for up to three (3) years for fraud investigation purposes before deletion.

When data is no longer required, kingpg securely destroys it using industry-standard data destruction methods — including cryptographic erasure for data stored on cloud infrastructure and secure file deletion for locally stored documents.

kingpg implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Key security measures include:

• Encryption in transit: all data transmitted between your device and kingpg's servers is encrypted using 256-bit SSL/TLS. The padlock icon in your browser confirms an active encrypted connection when you access kingpg.one.
• Encryption at rest: sensitive data — including KYC documents, payment details, and account credentials — is encrypted at rest using AES-256 or equivalent standards within kingpg's database infrastructure.
• Access controls: access to personal data within kingpg's systems is restricted on a need-to-know basis. Staff with access to sensitive data undergo background checks and are bound by confidentiality agreements.
• Two-factor authentication: kingpg offers and encourages 2FA for all user accounts to reduce the risk of account takeover.
• Intrusion detection: kingpg's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and potential security incidents.
• Regular security reviews: kingpg conducts periodic reviews of its security practices and, where appropriate, engages third-party security professionals to assess the Platform's defences.

Despite these measures, no system is entirely immune to security incidents. In the event of a personal data breach that is likely to result in risk or harm to individuals, kingpg will notify the National Privacy Commission (NPC) within 72 hours of discovery, consistent with NPC Circular No. 16-03, and will notify affected individuals without undue delay.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by kingpg. These rights may be exercised by contacting kingpg's Data Protection Officer (see Section 16):

Requests to exercise your data rights will be acknowledged within 3 business days and responded to within the timeframes prescribed by the NPC — typically 15 to 30 calendar days depending on complexity. kingpg will not charge a fee for routine data access requests. Where requests are manifestly unfounded or repetitive, kingpg reserves the right to charge a reasonable administrative fee consistent with NPC guidance.

The kingpg Platform is strictly intended for adults aged 21 years and over, consistent with Philippine gambling law and PAGCOR regulations. kingpg does not knowingly collect personal data from individuals under the age of 21. Age is verified at the point of registration through date-of-birth input and subsequently confirmed through KYC document verification.

If kingpg becomes aware that personal data has been submitted by or on behalf of a person under 21 years of age, that Account will be immediately suspended, all associated data will be investigated, and any funds will be dealt with in accordance with kingpg's Terms and Conditions and applicable law. Any inadvertently collected data pertaining to minors will be permanently deleted from kingpg's systems upon identification.

Account holders are responsible for preventing access to their kingpg Account by minors in their household. kingpg recommends enabling password protection on all devices used to access the Platform.

kingpg's primary operations are Philippines-based and its data is predominantly processed within the Philippines. However, certain service providers — including cloud infrastructure vendors, game providers, and payment gateway operators — may process data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, kingpg ensures that adequate data protection safeguards are in place, consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines on cross-border data flows. Such safeguards include contractual data processing agreements that bind receiving parties to equivalent data protection standards.

kingpg does not transfer personal data to jurisdictions without adequate data protection frameworks without first implementing appropriate contractual or technical safeguards to protect the rights of Philippine data subjects.

The kingpg Platform integrates third-party services including game engines from JILI, Pragmatic Play, PG Soft, Evolution Gaming, Habanero, and Spadegaming; payment gateways including GCash and Maya; and infrastructure services. While kingpg takes steps to ensure these providers operate to adequate data protection standards, each provider maintains its own privacy policy governing how they handle data within their respective platforms.

The kingpg website does not contain links to external third-party websites for general browsing. However, during the course of your transactions — particularly GCash and Maya payments — you may be redirected to those providers' own interfaces, which operate under their respective privacy policies. kingpg is not responsible for the privacy practices of third-party payment platforms once you have been redirected.

kingpg may update this Privacy Policy from time to time to reflect changes in its data processing practices, legal obligations, or operational structure. Material changes — meaning those that significantly affect how your personal data is processed or your rights as a data subject — will be communicated to registered users via the email address on file at least fourteen (14) days before the change takes effect.

The updated Policy will be published on this page with a revised effective date. Minor updates that do not materially affect your rights (such as formatting changes, clarifications, or corrections of typographical errors) may be made without prior notice.

Continued use of the kingpg Platform following the effective date of a revised Policy constitutes your acknowledgement of the updated terms. If you do not accept a material change to this Policy, you may request Account closure in accordance with the Terms and Conditions.

In accordance with the Philippine Data Privacy Act and the NPC's requirement for Personal Information Controllers processing sensitive personal information at scale, kingpg has appointed a Data Protection Officer (DPO). The DPO is responsible for overseeing data protection compliance, advising on data processing activities, acting as the primary point of contact for data subjects exercising their rights, and liaising with the National Privacy Commission.

To exercise your data rights, raise a privacy concern, request information about your personal data, or submit a data breach complaint, please contact the kingpg Data Protection Officer at the address below. All enquiries are treated with strict confidentiality and will be acknowledged within 3 business days.

For general support inquiries not related to data privacy, or for questions about your Account, deposits, withdrawals, or games, please reach the kingpg customer support team through the following channels. Support is available 24 hours a day, 7 days a week.