xpoker Privacy Policy

1 What Personal Data We Collect

When you register and use xpoker, we collect the following categories of personal data:

2 How We Collect Your Data

xpoker collects personal data through the following means:

• Direct submission: Information you provide when you register, complete KYC, submit a deposit request, or request a withdrawal.
• Automated collection: Technical and usage data collected automatically as you browse and use the platform — including cookies, session identifiers, and server logs.
• Third-party verification: Identity and payment verification data provided by local Philippine payment processors and identity verification services used to complete KYC.
• Support interactions: Information you provide when contacting xpoker support through your account dashboard.

3 How We Use Your Personal Data

xpoker uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the xpoker platform.
• Payment processing: To process deposits and withdrawals in Philippine Peso through verified local banking channels and e-wallets.
• Platform security: To protect your account through SSL encryption, OTP verification, fraud detection, and account activity monitoring.
• Regulatory compliance: To meet Know Your Customer (KYC) obligations and comply with applicable Philippine data protection and anti-money laundering requirements.
• Responsible gaming: To monitor player activity for signs of problematic gaming behaviour and to provide appropriate self-management tools and information.
• Platform improvement: To analyse usage patterns and improve the overall xpoker experience — including game performance, load times, and navigation.
• Communications: To send account-related notifications, OTP codes, and security alerts to your registered contact details.

xpoker does not use your personal data for automated decision-making that produces significant legal effects without human review, nor do we use your data for unsolicited direct marketing unless you have opted in.

4 Data Sharing and Third Parties

xpoker does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients only where necessary to operate your account and deliver our services:

• Payment processors: Philippine bank transfer services, InstaPay infrastructure providers, and local e-wallet platforms used to process your deposits and withdrawals.
• Identity verification providers: KYC service partners who assist in confirming your identity as required before account activation.
• Technology service providers: Platform hosting, security, and infrastructure providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Government or regulatory bodies in the Philippines where disclosure is required by law or in response to a valid legal request.

5 How We Keep Your Data Secure

xpoker uses a combination of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or loss:

• SSL/TLS encryption on all data transmitted between your device and xpoker servers.
• OTP (one-time password) verification for login from new devices and sensitive account actions including withdrawals.
• Access controls that limit which internal team members can access your personal data, based on the minimum required to perform their role.
• Regular security reviews of platform infrastructure and data handling practices.
• KYC documentation stored in secured systems with restricted access.

While we take all reasonable steps to protect your data, no internet-based system is completely free from risk. You also play a role in keeping your account secure — do not share your password or OTP codes with anyone, and log out of your session when you are done playing.

6 Data Retention

xpoker retains your personal data for as long as your account is active and for a reasonable period after account closure, as required to:

• Comply with applicable Philippine legal and regulatory obligations, including anti-money laundering record-keeping requirements.
• Resolve any outstanding disputes, complaints, or investigations relating to your account.
• Enforce our Terms & Conditions where relevant.

Once data is no longer required for these purposes, xpoker will securely delete or anonymise it in accordance with our internal data lifecycle policies. Transaction records and KYC documents are subject to longer retention periods as required by applicable Philippine law.

7 Your Data Privacy Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by xpoker:

To exercise any of these rights, contact xpoker through the support section of your account dashboard. We will respond within the timeframes required under applicable Philippine law.

8 Cookies and Tracking Technologies

xpoker uses cookies and similar technologies to operate and improve the platform. Cookies are small data files stored on your device when you access the website. We use the following types:

• Essential cookies: Required to keep you logged in and allow the platform to function. These cannot be disabled without affecting core features.
• Security cookies: Used to detect and prevent fraudulent activity and protect your session.
• Analytics cookies: Help us understand how pages are used and where improvements can be made. Data collected is aggregated and does not identify individual players.
• Preference cookies: Remember settings such as language or display preferences to improve your experience on return visits.

Most browsers allow you to manage or delete cookies through your browser settings. Disabling essential cookies may prevent certain parts of the xpoker platform from functioning correctly.

9 Minors and Age Restriction

xpoker is strictly a 21+ platform. We do not knowingly collect personal data from any person under the age of 21. Age verification is enforced during account registration, and KYC documentation is required before full account activation.

If we become aware that personal data has been collected from a person under 21, that account will be suspended and any associated data will be deleted in line with our data retention policies. Parents or guardians who believe a minor may have created an account should contact us immediately through the support section of the platform.

10 Changes to This Privacy Policy

xpoker may update this Privacy Policy from time to time to reflect changes in our data handling practices or applicable Philippine law. When updates are made, the revised policy will be published on this page with an updated date.

For significant changes that affect how we use your personal data, we will make reasonable efforts to notify registered players through their account dashboard or registered email address. Continued use of xpoker after a policy update constitutes acceptance of the revised terms.