aryonplay Privacy Policy

This Privacy Policy ("Policy") describes how aryonplay ("aryonplay", "we", "us", or "our") collects, uses, discloses, stores, and protects the personal data of individuals ("you", "your", "User", or "Player") who access or use the aryonplay online gaming platform available at aryonplay.vip and any associated mobile applications or services.

This Policy is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the relevant issuances of the National Privacy Commission of the Philippines ("NPC"). It also reflects aryonplay's obligations under Republic Act No. 9160, the Anti-Money Laundering Act ("AMLA"), as amended, and applicable guidelines issued by the Philippine Amusement and Gaming Corporation ("PAGCOR").

This Policy applies to all personal data collected in connection with your use of aryonplay, regardless of whether you are a registered account holder, a KYC-verified player, or a visitor browsing the platform without an account. By accessing aryonplay, you acknowledge that you have read and understood this Policy and that your personal data will be processed as described herein.

For the purposes of the Philippine Data Privacy Act of 2012, aryonplay is the data controller in respect of the personal data of Users collected and processed through the aryonplay platform. As data controller, aryonplay determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.

aryonplay has designated a Data Protection Officer ("DPO") in accordance with the requirements of the DPA. The DPO is responsible for overseeing aryonplay's data protection compliance program, handling data subject requests, liaising with the National Privacy Commission, and advising on data protection impact assessments for high-risk processing activities. Contact details for the DPO are set out in Section 16 of this Policy.

aryonplay collects the following categories of personal data from Users:

3.1 Registration and Identity Data

• Full legal name as it appears on a Philippine government-issued identification document.
• Date of birth (used for age verification — players must be 21 years of age or older).
• Philippine mobile number (used as primary account identifier and for 2FA verification).
• Email address.
• Username and chosen account display name.
• Hashed password (aryonplay does not store plaintext passwords).

3.2 KYC Verification Data

• Copies of Philippine government-issued photo identification documents (passport, SSS ID, PhilHealth ID, driver's license, UMID, or PhilSys National ID).
• Selfie photographs with held ID, submitted for identity confirmation.
• Proof of residential address documentation (utility bills, barangay certificates, or bank statements issued within 90 days of submission).

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records in Philippine Peso.
• Payment method identifiers (GCash account references, PayMaya identifiers, bank account details for BPI, BDO, and Metrobank transactions).
• Bet history, game session records, and account balance data.

3.4 Device and Technical Data

• IP addresses associated with account logins and platform sessions.
• Device type, operating system version, browser type, and screen resolution.
• Session timestamps and duration records.
• Approximate geolocation data derived from IP address (city or regional level only — aryonplay does not collect precise GPS coordinates).

3.5 Behavioural and Usage Data

• Game preferences, frequently played game categories, and session patterns.
• Responsible gaming tool usage (deposit limit settings, session alerts, cool-off requests).
• Customer support interaction records, including live chat transcripts.

3.6 Marketing Data

• Communication preferences (opted-in marketing channels: SMS, email).
• Promotional offer redemption history.
• Survey responses where voluntarily provided.

aryonplay collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to surveys, or update your account settings.
• Automatically: through cookies, web beacons, and similar tracking technologies that record your interactions with the aryonplay platform during browsing and gaming sessions. See Section 10 for full details on cookie use.
• From payment service providers: aryonplay receives transaction confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank when processing your deposits and withdrawals. This data is limited to what is necessary to process and reconcile transactions.
• From identity verification services: aryonplay may use third-party identity verification providers to assist with automated document verification during the KYC process. These providers process document images solely for verification purposes under contractual data processing agreements with aryonplay.

aryonplay processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

aryonplay uses your personal data only for the specific, declared purposes set out in this Policy. We do not use personal data for undisclosed purposes. Specifically, aryonplay uses your data to:

• Create, maintain, and administer your aryonplay account and deliver the gaming services you request.
• Verify your identity and age during registration and through the KYC process, as required by Philippine law and PAGCOR regulations.
• Process deposits and withdrawals in Philippine Peso through your selected payment channels.
• Detect, investigate, and prevent fraud, money laundering, account takeover attempts, and other prohibited conduct.
• Meet aryonplay's statutory reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine regulatory authorities.
• Provide customer support, respond to your enquiries, and resolve disputes.
• Monitor and enforce compliance with the aryonplay Terms & Conditions.
• Operate and improve the responsible gaming tools available in your account, including deposit limits, session timers, and self-exclusion features.
• Analyse aggregated, anonymised usage data to improve the aryonplay platform, fix technical issues, and develop new features.
• Send you marketing communications about aryonplay offers, promotions, and new game releases — where you have opted in to receive such communications.

aryonplay does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the specific purpose:

7.1 Payment Service Providers

aryonplay shares transaction data with authorized Philippine payment processors — GCash, PayMaya, BPI, BDO, and Metrobank — to facilitate deposit and withdrawal processing. Each provider processes your data under their own privacy policies and in accordance with applicable Philippine financial regulations.

7.2 Identity Verification Providers

aryonplay may engage authorized third-party identity verification service providers to assist with document authentication during the KYC process. These providers act as data processors under contractual data processing agreements and may not use your data for any purpose other than the specific verification task.

7.3 Regulatory and Legal Disclosures

aryonplay is required by Philippine law to disclose personal data to regulatory authorities in specific circumstances, including:

• Reporting obligations to PAGCOR as the gaming regulator.
• Suspicious transaction and covered transaction reporting to the Anti-Money Laundering Council (AMLC) as required under AMLA.
• Disclosure to the National Privacy Commission in connection with data breach notifications or regulatory investigations.
• Disclosure in response to a valid court order, judicial warrant, or lawful instruction from a competent Philippine authority.

7.4 Platform Technology Providers

aryonplay uses cloud hosting infrastructure, analytics platforms, and gaming content providers who may process limited technical data in connection with delivering aryonplay's services. All such providers are bound by data processing agreements that restrict use to the specific service being provided and require maintenance of security standards at least equivalent to those applied by aryonplay.

aryonplay retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, aryonplay will securely delete or anonymise the personal data in accordance with its data destruction procedures. Anonymised data — from which it is not possible to identify any individual — may be retained and used for statistical and analytical purposes beyond the retention periods above.

aryonplay implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and aryonplay's servers is encrypted using 256-bit SSL/TLS protocols. aryonplay enforces HTTPS across all platform endpoints without exception.
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is stored using AES-256 encryption on aryonplay's secured servers.
• Password security: Passwords are never stored in plaintext. aryonplay uses a modern one-way cryptographic hashing algorithm with salting, ensuring that even aryonplay's own technical team cannot recover your password from stored data.
• Access controls: Access to personal data within aryonplay is restricted on a strict need-to-know basis. Staff and system access rights are reviewed periodically and revoked immediately upon role change or departure.
• Two-factor authentication: aryonplay supports and encourages two-factor authentication (2FA) via SMS for all player accounts, adding a second layer of protection against unauthorized access.
• Security monitoring: aryonplay's systems are monitored continuously for anomalous activity, unauthorized access attempts, and potential security incidents.
• Vulnerability management: aryonplay conducts regular security assessments and applies patches and updates to platform components on a scheduled basis.

9.1 Data Breach Notification

In the event of a personal data breach that is likely to result in a significant risk to the rights and freedoms of affected individuals, aryonplay will notify the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with the DPA and NPC Circular No. 16-03. Affected Users will be notified as expeditiously as practicable, with information about the nature of the breach, the data affected, and the steps they can take to protect themselves.

aryonplay uses cookies and similar technologies (web beacons, pixel tags, and local storage objects) to operate the platform, maintain your login session, protect against fraud, and understand how the platform is used. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that maintain your login state while you are using the platform, security tokens that protect against CSRF attacks, and cookies that store your consent preferences. These cannot be disabled.
• Functional Cookies: Store your preferences such as language settings, display preferences, and responsible gaming tool configurations. These improve your experience but are not strictly necessary for platform operation.
• Analytics Cookies: Collect anonymised data about how Users interact with the aryonplay platform to help us identify performance issues, popular features, and areas for improvement. Analytics data is aggregated and does not identify individual users.
• Security Cookies: Used to detect and prevent fraudulent account access, bot activity, and other security threats. These include device fingerprinting cookies used to identify anomalous login patterns.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from using the aryonplay platform. Blocking other categories of cookies may degrade platform functionality but will not prevent basic access.

The aryonplay platform is strictly intended for individuals aged 21 years and above. aryonplay does not knowingly collect personal data from individuals below the age of 21. Age verification is a mandatory component of the account registration process, and KYC verification is required to confirm compliance with the minimum age requirement before full withdrawal access is granted.

If you are a parent or guardian and have reason to believe that a minor has registered an account with aryonplay, please contact our support team immediately through the live chat function on the platform.

aryonplay operates primarily within the Philippines and processes the majority of personal data on servers located within Philippine jurisdiction. Where it is necessary to transfer personal data to a third-party service provider operating servers outside the Philippines — such as cloud infrastructure providers or identity verification services — aryonplay ensures that such transfers are conducted only where:

• The recipient country has been determined to provide an adequate level of data protection by the National Privacy Commission, or
• The transfer is governed by a data sharing agreement incorporating standard data protection clauses consistent with NPC requirements, ensuring that the recipient provides contractual guarantees of a level of protection equivalent to that required under the Philippine DPA.

aryonplay does not transfer personal data to jurisdictions that do not offer adequate protection and does not transfer personal data to any party that has not entered into a binding data processing agreement with aryonplay.

To exercise any of the data rights described in this Policy and summarized in the feature cards above, you may submit a request through either of the following channels:

• Account Settings: Many data rights can be exercised directly within your aryonplay account — including access to transaction history, correction of non-KYC profile details, and management of marketing communication preferences.
• Live Chat: Contact the aryonplay support team via live chat, available 24/7 from any page on the platform. Identify your request type and the support agent will guide you through the appropriate process or escalate to the DPO where required.
• Data Protection Officer: For formal data subject access requests, erasure requests, or complex data portability requests, contact the aryonplay DPO using the details set out in Section 16.

aryonplay will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or aryonplay receives a high volume of requests simultaneously, the response period may be extended by a further 30 days, and you will be notified of the extension and the reason for it.

aryonplay will not charge a fee for processing routine data rights requests. Where requests are manifestly unfounded or excessive — particularly where they are repetitive in nature — aryonplay may charge a reasonable administrative fee or decline to act on the request, with written explanation of the reason.

If you believe that aryonplay has processed your personal data in a manner inconsistent with this Policy or the Philippine Data Privacy Act, you have the right to raise a complaint. We ask that you first contact aryonplay directly through the support team or the DPO, as described in Section 16, to give us the opportunity to investigate and resolve your concern.

If you are not satisfied with aryonplay's response, or if you wish to report a data privacy concern directly to the regulator, you may lodge a complaint with the National Privacy Commission of the Philippines ("NPC"). The NPC is the independent authority responsible for administering and enforcing the Philippine Data Privacy Act. Information about the NPC's complaint process is available through the NPC's official channels.

aryonplay may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or the features available on the platform. The most current version of this Policy will always be available at aryonplay.vip/privacy-policy.

In the event of a material change to this Policy — meaning a change that significantly affects how your personal data is used or the rights available to you — aryonplay will provide advance notice via the email address or Philippine mobile number registered to your account, at least 7 days prior to the change taking effect. Minor clarificatory updates may be made without advance notice.

Your continued use of the aryonplay platform following the effective date of any update to this Policy constitutes your acknowledgement of the updated Policy. If you do not accept the updated Policy, you should cease using the platform and may request account closure in accordance with the aryonplay Terms & Conditions.

For all data privacy enquiries, data subject rights requests, or to contact the aryonplay Data Protection Officer, please use the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from any page on the aryonplay platform. For urgent matters, live chat provides the fastest response.
• Email: [email protected] — mark the subject line with "Data Privacy Request" to ensure routing to the DPO team.
• Response time: aryonplay will acknowledge all written data privacy enquiries within 5 business days and provide a substantive response within 30 calendar days, subject to the extension provisions described in Section 13.

When submitting a data rights request, please provide sufficient information to allow aryonplay to verify your identity and locate the relevant data. For security purposes, aryonplay will not release personal data without first verifying the identity of the requesting individual. This protects your data against unauthorized disclosure requests by third parties claiming to act on your behalf.