Privacy Policy

1. Overview

x0play takes the privacy of its players seriously. As an online casino and sports betting platform serving Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and all parts of the Philippines, we process personal data in accordance with applicable Philippine data privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as any other applicable international data protection standards.

This Privacy Policy describes in detail the categories of personal data we collect from players, the purposes for which we process that data, the legal bases on which we rely, the parties with whom we may share your information, how long we retain your data, the security measures we have in place to protect it, and the rights you have as a data subject under Philippine law.

We encourage all x0play players to read this policy carefully. If you have any questions about our privacy practices that are not addressed here, please contact our Data Protection Officer using the details provided in Section 15.

2. Data Controller

For the purposes of applicable data protection legislation, x0play is the data controller in respect of the personal information collected through x0play.cam. As data controller, x0play determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

The x0play Data Protection Officer (DPO) is responsible for overseeing this policy and ensuring compliance with data protection obligations. You may contact the DPO at [email protected] for any data privacy-related concerns, requests, or complaints.

3. Information We Collect

x0play collects personal data through several means: directly from you when you register and use our platform; automatically when you access and interact with our website; and from third-party service providers involved in delivering our services. The categories of personal data we collect include the following:

x0play does not collect special categories of sensitive personal data (such as health, religious, or political information) unless expressly required by applicable law or regulatory obligations. We do not collect data from individuals who have not knowingly registered an account with x0play.

4. Legal Basis for Processing

x0play processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to fulfill our contractual obligations to you as an x0play account holder, including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, PAGCOR regulatory requirements, and tax reporting obligations;
• Legitimate interests: Processing carried out for x0play's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming compliance, provided such interests are not overridden by your data protection rights;
• Consent: Processing based on your explicit consent, such as the use of non-essential cookies or the sending of marketing communications, which you may withdraw at any time.

5. How We Use Your Data

x0play uses the personal data we collect for the following specific purposes:

• To create, maintain, and manage your x0play account, including identity verification and KYC compliance;
• To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven Cliqq, USDT, and other supported payment methods;
• To deliver the games, live dealer tables, and sports betting services you request on our platform;
• To communicate with you about your account, transactions, and promotional offers that may be relevant to you;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To comply with our responsible gaming obligations, including monitoring gaming activity for signs of problem gambling and enforcing self-exclusion requests;
• To fulfill our regulatory obligations under PAGCOR requirements and applicable Philippine law;
• To improve the x0play platform through analysis of usage patterns, technical performance data, and player feedback;
• To respond to customer support inquiries and resolve complaints promptly;
• To send you marketing communications about x0play promotions and offers, where you have provided consent or where we have a legitimate interest in doing so.

x0play will not use your personal data for purposes that are incompatible with the purposes described in this Privacy Policy without first notifying you and, where required by law, obtaining your consent.

6. Sharing Your Information

x0play does not sell your personal data to third parties for commercial purposes under any circumstances. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other payment service providers required to process your deposits and withdrawals;
• Identity verification providers: Third-party KYC and anti-fraud service providers who assist us in verifying your identity and preventing fraud;
• Game software providers: Licensed game developers and live dealer platform operators whose software powers games available on x0play;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies where disclosure is required by law;
• Law enforcement: Philippine law enforcement agencies when we are legally required or have a good-faith belief that disclosure is necessary to prevent crime or protect safety;
• Professional advisers: Lawyers, auditors, and compliance consultants who are bound by confidentiality obligations;
• Business successors: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent data protection commitments.

All third parties with whom x0play shares personal data are required to handle such data in compliance with applicable data protection laws and x0play's data processing standards.

7. Data Retention

x0play retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce our agreements. Our general retention principles are as follows:

• Active account data: Retained for the duration of your x0play account and for a period of five (5) years following account closure, in compliance with Philippine AML and gaming regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of transaction, as required by AMLC regulations;
• KYC documents: Retained for the period required by applicable Philippine law following account closure or the date of document submission, whichever is later;
• Customer support records: Retained for two (2) years from the date of the last interaction, unless a longer period is required to resolve an ongoing dispute;
• Marketing consent records: Retained until consent is withdrawn, plus a further period sufficient to demonstrate that consent was obtained.

Upon expiration of the applicable retention period, x0play will securely delete or anonymize your personal data in a manner that prevents reconstruction or identification.

8. Data Security

x0play implements and maintains appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security practices include:

• 256-bit SSL/TLS encryption on all pages and communications on the x0play platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Two-factor authentication options for player accounts;
• Continuous monitoring and automated alerting for suspicious account access patterns;
• Regular security audits, penetration testing, and vulnerability assessments;
• Staff training on data protection obligations and cybersecurity best practices.

While x0play employs industry-standard security measures, no internet transmission or electronic storage system is completely secure. In the event of a data breach that is likely to result in high risk to your rights and freedoms, x0play will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012.

9. Cookies and Tracking Technologies

x0play uses cookies and similar tracking technologies on our website to deliver essential functionality, enhance your experience, analyze platform usage, and support our security and fraud prevention efforts. The types of cookies we use include:

• Essential cookies: Strictly necessary for the operation of x0play. These enable core functions such as account login sessions, security verification, and platform navigation. They cannot be disabled without affecting your ability to use the platform.
• Functional cookies: Allow x0play to remember your preferences, such as language settings and previously viewed games, to provide a more personalized experience.
• Analytics cookies: Help x0play understand how players interact with our platform by collecting aggregate usage statistics. This data is used to improve platform performance and usability.
• Security cookies: Support our fraud detection and account security systems by identifying unusual login patterns or access attempts.

You may manage your cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to access x0play, though certain personalization features may be limited. By continuing to use x0play after being presented with our cookie notice, you consent to our use of cookies as described in this policy.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by x0play:

• Right to be informed: The right to be informed of how your personal data is collected, processed, and used, as detailed in this Privacy Policy;
• Right of access: The right to request a copy of the personal data x0play holds about you and information about how it is being processed;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held about you;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to object: The right to object to certain types of processing of your personal data, including processing for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another data controller where technically feasible;
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact x0play's Data Protection Officer at [email protected]. x0play will respond to all data subject requests within thirty (30) days, or within such extended period as permitted by applicable law, and will provide a full explanation where we are unable to fulfill a request.

11. Minors and Age Verification

x0play's platform is strictly intended for individuals who are 21 years of age or older, in compliance with Philippine regulations governing online casino gaming. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the x0play registration and KYC process, and we reserve the right to request additional documentary proof of age at any time.

If x0play discovers or reasonably suspects that an account has been created by or on behalf of a person under the age of 21, we will immediately suspend the account, reverse any transactions associated with it to the extent possible, and permanently delete any personal data collected from that individual. Parents and guardians who become aware that their child has created an x0play account are requested to notify us immediately at [email protected] so that appropriate action can be taken without delay.

12. International Data Transfers

In the course of delivering our services, some of your personal data may be transferred to and processed in countries other than the Philippines, including in connection with our third-party payment processors, game software providers, and cloud infrastructure. Where such transfers occur, x0play takes reasonable steps to ensure that your personal data receives adequate protection equivalent to that provided under Philippine law, including through the use of contractual data processing agreements with relevant safeguards.

By using x0play and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to these entities for the purposes described in this policy, subject to the protections outlined herein.

13. Third-Party Links and Services

The x0play platform may contain references or indirect connections to third-party services, such as payment gateways and game providers, through the course of using our platform. x0play is not responsible for the privacy practices of third-party services that you access independently of our platform. We encourage you to review the privacy policies of any third-party services you use in connection with your gaming activity.

14. Changes to This Privacy Policy

x0play reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered x0play players via email notification or a prominent notice on the platform prior to the changes taking effect. The effective date displayed at the top of this document will be updated accordingly.

Your continued use of x0play following notification of any material change to this Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree with any change, you should discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the way x0play processes your personal data, please contact our Data Protection Officer using the following details:

• Email: [email protected]
• Live Chat: Available 24/7 directly from the x0play platform
• Support Languages: English and Filipino (Tagalog)

Our support team is available around the clock. For formal data subject access requests or complaints, please email our DPO with the subject line "Data Privacy Request" to ensure your inquiry is directed appropriately. We aim to acknowledge all privacy-related requests within 72 hours and to provide a substantive response within 30 days.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated, regardless of whether you have first raised the matter with x0play.