diwataplay Privacy Policy – How We Handle Your Personal Data

When you register an account on diwataplay, we collect the personal details you provide — including your full name, email address, date of birth, and contact number. This information is required to verify your identity, confirm that you meet the minimum age requirement of 18 years, and set up your player account correctly. When you make a deposit or request a withdrawal, we also collect payment-related details such as your GCash number, Maya account, or bank account information, which are used solely to process your transactions. If you contact our support team, we may keep a record of that conversation to help resolve your concern and improve our service. You are always in control of the information you submit — if any detail changes, you can update it through your account settings. We only ask for what we genuinely need to provide you with a safe and smooth gaming experience on our Philippines platform. Providing accurate information is your responsibility, and submitting false details may result in account suspension.

When you visit or use the diwataplay platform — whether on desktop or mobile — our systems automatically collect certain technical data to keep the service running smoothly and securely. This includes your IP address, device type, operating system, browser version, and the pages or game sections you visit during each session. We also record session timestamps, login history, and in-game activity logs, which help us detect unusual behaviour and protect your account from unauthorised access. This data is never used to build advertising profiles or sold to third-party marketers. It is used strictly for platform security, fraud prevention, technical troubleshooting, and improving the overall player experience. On mobile devices, we may also collect information about your network connection type to optimise loading speeds and game performance. You can limit some automatic data collection by adjusting your browser or device settings, though this may affect certain platform features.

diwataplay does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes — full stop. We may share limited information with trusted service providers who help us operate the platform, such as payment processors, identity verification partners, and cloud infrastructure providers, but only to the extent necessary for them to perform their specific function. All such partners are contractually required to handle your data with the same level of care and confidentiality that we apply ourselves. We may also disclose information to Philippine regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law or a valid legal order. In the event of a business restructuring or acquisition, your data may be transferred to a successor entity, but you will be notified in advance and your rights will be preserved. We will never share your data with online advertisers, data brokers, or social media platforms without your explicit consent. Any third party that receives your data is prohibited from using it for any purpose beyond what we have authorised.

We use industry-standard Transport Layer Security (TLS) encryption on all data transmitted between your device and our servers, so your login credentials, payment details, and personal information are protected in transit at all times. Sensitive data stored on our servers is encrypted at rest using strong cryptographic standards, and access is restricted to authorised personnel only on a strict need-to-know basis. Our systems are monitored continuously for suspicious activity, and we conduct regular security reviews to identify and address potential vulnerabilities before they can be exploited. In the unlikely event of a data breach that affects your personal information, we will notify you promptly and take immediate steps to contain the incident and minimise any impact. We also encourage you to protect your own account by using a strong, unique password and enabling any additional security features available in your account settings. Never share your login credentials with anyone, including people claiming to be diwataplay staff — our team will never ask for your password. If you suspect your account has been compromised, contact our support team immediately so we can act fast.

As a player on diwataplay, you have clear rights over the personal data we hold about you, in line with the Philippine Data Privacy Act of 2012 and its implementing rules. You have the right to access a copy of your personal data, to request corrections if any information is inaccurate or outdated, and to ask us to delete your data in certain circumstances — for example, if you close your account and there is no legal obligation for us to retain it. You also have the right to object to specific types of processing, such as the use of your data for profiling or analytics, and to withdraw any consent you have previously given at any time. To exercise any of these rights, simply contact our support team with your request and we will respond within the timeframe required by applicable law. We may need to verify your identity before processing certain requests to protect your account from unauthorised access. All requests are handled with care and without any negative impact on your ability to use the platform.

We retain your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by Philippine law and regulatory obligations. Account information is kept for the duration of your active account and for a defined period after account closure, to comply with anti-money laundering regulations and gaming licence requirements. Transaction records are retained for a minimum of five years in line with financial reporting obligations applicable in the Philippines. Technical logs and session data are typically retained for a shorter period and are deleted once they are no longer needed for security or troubleshooting purposes. When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you. If you request deletion of your account and there is no legal reason to retain your data, we will process the deletion within a reasonable timeframe and confirm it to you. You can contact our support team at any time to ask about the specific retention period that applies to your data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. When we make material changes, we will notify registered players via email and display a prominent notice on the diwataplay platform at least seven days before the updated policy takes effect. The "Last updated" date at the top of this page will always reflect the most recent revision, so you can quickly check whether anything has changed since your last visit. We encourage you to review this page periodically, especially before making deposits or sharing new personal information with us. Continued use of the platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you disagree with any changes, you have the right to close your account and request deletion of your data before the new policy takes effect. For any questions about this policy or how your data is handled, please visit our FAQ page or reach out to our support team directly.