Your Data, Your Rights – Philippine Data Privacy Act Compliant

Privacy Policy – PH Spark Online Betting Philippines

At PH Spark, protecting the personal information of our members is something we take seriously — not just because the law requires it, but because we genuinely believe that trust is the foundation of everything we do. This Privacy Policy explains clearly and honestly how we collect, use, store, and protect your data.

Data We Collect

Name, contact details, ID documents, payment info and usage data.

Why We Use It

Account management, payments, compliance, fraud prevention and service improvement.

Who Sees It

Only verified processors, regulators and licensed partners — never sold for ads.

How Long

Active account lifetime plus 5 years after closure, as required by Philippine law.

Your Rights

Access, correct, delete and port your data under RA 10173 at any time.

Contact DPO

privacy@phspark.app for all data-related questions and requests.

This summary card row is for quick reference only. The full Privacy Policy below is the legally binding version.

How PH Spark Keeps Your Data Safe

Six core practices that define how PH Spark handles the personal information of every member.

SSL Encryption on All Connections

Every connection to PH Spark — login, deposit, withdrawal, account settings — is encrypted using TLS. Your personal and financial data is never transmitted in plain text over any network.

Strict Access Controls

Only PH Spark staff who genuinely need access to specific data for their job function can see it. Access to member records is logged, audited, and reviewed regularly. No blanket access for any individual.

We Never Sell Your Data

PH Spark does not sell, rent, or trade personal data to marketing companies, data brokers, or any third party for commercial purposes. This is a firm commitment, not a conditional one.

Philippine Law Compliance

PH Spark operates in full compliance with the Data Privacy Act of 2012 (Republic Act 10173) and applicable National Privacy Commission (NPC) guidelines. A designated Data Protection Officer oversees compliance.

Data Minimisation Principle

PH Spark only collects data that is genuinely necessary for the stated purpose. If we don't need something to operate your account or comply with regulations, we don't collect it. Data that is no longer needed is securely deleted.

Breach Notification

In the unlikely event of a data breach affecting your personal information, PH Spark will notify you and the National Privacy Commission within 72 hours of discovering the breach, as required under Philippine law.

ph spark
Last Updated: 1 June 2025 Version 2.4 English (en-PH) Republic of the Philippines

1Introduction

This Privacy Policy describes how PH Spark ("we," "us," "our," or "the Platform") collects, uses, stores, and protects the personal information of members and visitors of the PH Spark website and services. This document applies to all individuals who register an account, browse the PH Spark platform, or interact with PH Spark in any capacity.

PH Spark is built for Filipino players, and we take the data privacy expectations of our community seriously. This Policy has been drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, as well as applicable circulars issued by the National Privacy Commission (NPC) of the Philippines.

By using PH Spark — whether by creating an account, making a deposit, placing a bet, or simply browsing — you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein.

Note for PH Spark members: If you have questions about this Policy or wish to exercise your data rights, contact our Data Protection Officer directly at privacy@phspark.app. We respond to all data queries within 5 business days.

2Who We Are (Data Controller)

For the purposes of the Data Privacy Act of 2012, PH Spark is the personal information controller responsible for your data. This means PH Spark determines the purpose and means of processing the personal data collected through the platform.

PH Spark operates the online betting and gaming platform accessible at phspark.app. Our Data Protection Officer (DPO) can be contacted at privacy@phspark.app for all matters related to personal data.

Where PH Spark engages third-party service providers — such as payment processors, identity verification services, or analytics providers — those parties act as personal information processors under PH Spark's instructions and are bound by data processing agreements that require them to maintain the same level of data protection as PH Spark itself.

3Personal Data We Collect

PH Spark collects only the personal data necessary to operate the platform, comply with legal obligations, and provide a safe and fair experience for all members. The categories of personal data we collect include:

CategorySpecific Data PointsCollection Method
Identity Data Full legal name, date of birth, gender, nationality, government ID type and number Registration form, KYC verification
Contact Data Email address, mobile number, Philippine residential address Registration form, account settings
Financial Data GCash number, Maya number, bank account details (for withdrawals), card last 4 digits Payment processing, withdrawal requests
Verification Data Copies of government-issued ID, selfie/liveness check images (for KYC) KYC submission
Transactional Data Deposit history, withdrawal history, betting history, live casino game records Platform activity
Technical Data IP address, device type and ID, browser type, operating system, session duration Automatic collection via cookies and logs
Usage Data Pages visited, features used, search queries within the platform, click patterns Automatic collection via analytics tools
Communications Data Support chat transcripts, email correspondence, feedback submitted Direct communication with PH Spark

PH Spark does not collect sensitive personal information such as religious beliefs, political opinions, or health data unless specifically required to do so by applicable regulation (for example, in the context of responsible gaming support). Where such data is collected, explicit consent will be obtained.

ph spark

4How We Use Your Personal Data

PH Spark uses your personal data for specific, clearly defined purposes. We do not use data for any purpose incompatible with the purpose for which it was collected without obtaining separate consent. The primary purposes for which PH Spark processes personal data include:

  • Account creation and management: To register your account, verify your identity, manage your profile settings, and maintain an active member relationship with you on PH Spark.
  • Payment processing: To process deposits, withdrawals, and refunds via GCash, Maya, bank transfer, and card channels. Financial data is passed securely to licensed payment processors and is never stored in full on PH Spark servers.
  • Legal and regulatory compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, tax reporting, and any other obligations imposed by Philippine law or regulatory authorities including the PAGCOR and the NPC.
  • Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and any other form of illegal or prohibited conduct on PH Spark.
  • Service delivery and improvement: To provide betting markets, live casino services, esports odds, promotions, and customer support. Usage data helps PH Spark identify areas for improvement and fix issues faster.
  • Responsible gaming: To monitor betting patterns that may indicate harmful behaviour and to operate deposit limits, loss limits, and self-exclusion tools effectively on behalf of members.
  • Customer support: To respond to queries, resolve disputes, process complaints, and communicate material account information to members.
  • Marketing (where consented): To send promotional offers, bonus notifications, and updates about PH Spark products. Members may opt out at any time as described in Section 12.

5Legal Basis for Processing

Under the Data Privacy Act of 2012, PH Spark must have a lawful basis for each type of personal data processing. The legal bases relied upon by PH Spark are:

  • Contractual necessity: Processing required to perform our obligations under the Member Terms and Conditions — including account management, payments, and bet settlement.
  • Legal obligation: Processing required to comply with Philippine laws, including AML/CFT legislation, tax obligations, and regulatory reporting requirements.
  • Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
  • Consent: Processing for marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where processing is based on consent, you have the right to withdraw that consent at any time by contacting privacy@phspark.app or adjusting your account notification settings. Withdrawal of consent will not affect the validity of processing already carried out.

6Sharing Your Personal Data

PH Spark does not sell or trade your personal data. We share personal data only where necessary and with appropriate safeguards in place. The categories of recipients who may receive your personal data are:

  • Payment processors: GCash (Globe Fintech Innovations), Voyager Innovations (Maya), GrabPay, and Philippine banking partners — only the data necessary to process transactions is shared with these providers.
  • Identity verification providers: Licensed third-party KYC providers who process ID documents to verify member identity. These providers are bound by strict data processing agreements and Philippine data protection law.
  • Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement agencies where disclosure is required by Philippine law or valid legal order.
  • Technology providers: Cloud hosting providers, security services, and platform infrastructure partners who process data solely under PH Spark's instructions and are prohibited from using data for any independent purpose.
  • Live casino game providers: Licensed third-party live casino operators whose games are offered on PH Spark. Game result data and account identifiers are shared as necessary to operate the live casino product.
  • Professional advisors: Legal, accounting, and audit firms engaged by PH Spark, who process data only as necessary for their professional services and under confidentiality obligations.

All third parties with whom PH Spark shares personal data are required to handle that data in accordance with the Data Privacy Act of 2012 and PH Spark's data processing standards. PH Spark takes responsibility for the personal data processing activities of its processors.

ph spark

7Data Retention

PH Spark retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. The key retention periods applied by PH Spark are:

Data CategoryRetention PeriodReason
Account identity and contact dataDuration of account + 5 years after closureAML/KYC legal requirement
Transaction and betting recordsDuration of account + 5 years after closureAML/KYC and tax compliance
KYC documents (ID copies)Duration of account + 5 years after closureRegulatory obligation
Support communications3 years from date of communicationDispute resolution
Technical and usage logs12 monthsSecurity monitoring
Marketing consent recordsUntil consent is withdrawn + 1 yearConsent management evidence

After the applicable retention period expires, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. PH Spark conducts periodic data audits to ensure that retained data does not exceed what is necessary.

8Cookies and Tracking Technologies

PH Spark uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device when you visit a website. They help us operate the platform efficiently, remember your preferences, and understand how members use PH Spark's services.

Cookie TypePurposeCan Be Declined?
Essential Session Cookies Keep you logged in, maintain your betting slip, and enable core platform functions No — essential for PH Spark to function
Essential Security Cookies Detect and prevent fraud, bot activity, and CSRF attacks No — required for platform security
Analytics Performance Cookies Measure page load times, identify technical issues, and improve platform performance Yes — opt out in account settings or cookie manager
Functional Preference Cookies Remember your language, odds format, and display preferences across sessions Yes — disabling this means preferences reset on each visit

PH Spark does not use cookies for third-party advertising or to track your browsing activity on websites outside of the PH Spark platform. Cookie consent preferences can be managed through the cookie settings panel accessible from the footer of any PH Spark page.

9Your Data Rights Under Philippine Law

Under the Data Privacy Act of 2012, PH Spark members have the following rights in relation to their personal data. PH Spark is committed to making these rights easy to exercise — not hidden behind lengthy processes.

Right to Access

Request a copy of the personal data PH Spark holds about you and information about how it is processed. Responses are provided within 15 business days.

Right to Rectification

Request correction of inaccurate or incomplete personal data. Update your contact details directly in account settings or contact our DPO for identity data corrections.

Right to Erasure

Request deletion of personal data where it is no longer necessary for the purpose it was collected — subject to PH Spark's legal retention obligations under AML regulations.

Right to Data Portability

Request a machine-readable copy of the personal data you provided to PH Spark for transfer to another service provider where technically feasible.

Right to Object

Object to processing of your personal data carried out on the basis of legitimate interests, including direct marketing. PH Spark will cease such processing unless compelling legitimate grounds override your interests.

Right to Lodge a Complaint

If you believe PH Spark has processed your data unlawfully, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact our DPO first — we aim to resolve complaints internally.

To exercise any of the above rights, contact our Data Protection Officer at privacy@phspark.app with the subject line "Data Rights Request." Please include your registered account email and a description of your request. Identity verification may be required before we action sensitive requests to protect your account security.

10Data Security Measures

PH Spark implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include:

  • Encryption: All data in transit is protected by TLS 1.2 or higher. Sensitive data at rest (including payment information and ID document copies) is encrypted using AES-256 encryption.
  • Access controls: Role-based access control (RBAC) limits data access to staff with a genuine operational need. All access is logged and monitored. Privileged access requires multi-factor authentication.
  • Infrastructure security: PH Spark uses reputable cloud infrastructure providers with ISO 27001 certification. Regular vulnerability assessments and penetration testing are conducted by independent security specialists.
  • Incident response: PH Spark maintains a documented data breach response plan. Any confirmed breach affecting member data will be reported to the NPC and affected members within 72 hours of discovery.
  • Employee training: All PH Spark staff with access to personal data undergo regular data protection training and are bound by confidentiality obligations.

Despite these measures, no internet transmission or storage system is completely immune from risk. PH Spark encourages all members to use strong, unique passwords for their accounts and to enable two-factor authentication where available.

11Children's Privacy

PH Spark is strictly intended for adults aged 21 and above. PH Spark does not knowingly collect personal data from individuals under the age of 21. If PH Spark discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account closed.

If you are a parent or guardian and believe that a minor has registered an account or submitted personal data to PH Spark, please contact us immediately at privacy@phspark.app. PH Spark will investigate and take appropriate action, including deletion of all data and closure of the account, within 48 hours of a confirmed report.

Responsible gaming note: PH Spark operates robust age verification checks as part of the KYC process. Any account where age cannot be verified will be suspended until verification is complete. The safety of minors is a non-negotiable priority for PH Spark.

12Marketing Communications

PH Spark may send promotional emails, SMS messages, and in-platform notifications about bonuses, new features, upcoming events, and other PH Spark promotions. This marketing is only sent to members who have given explicit consent during registration or subsequently opted in through account settings.

You can update your marketing preferences or opt out of all marketing communications at any time through the following methods:

  • Logging into your PH Spark account and adjusting notification preferences in the Account Settings section.
  • Clicking the "Unsubscribe" link included in every PH Spark marketing email.
  • Contacting our support team at support@phspark.app and requesting removal from all marketing lists.

Opting out of marketing communications will not affect transactional communications — PH Spark will still send you important account notifications such as deposit confirmations, withdrawal receipts, and security alerts regardless of marketing preferences.

13Cross-Border Data Transfers

PH Spark is a Philippines-based platform and processes the majority of personal data within the Philippines. In limited circumstances, personal data may be transferred to countries outside the Philippines — for example, where PH Spark uses globally hosted cloud infrastructure or third-party service providers with operations in other jurisdictions.

When personal data is transferred outside the Philippines, PH Spark ensures that appropriate safeguards are in place to protect it, in compliance with the Data Privacy Act of 2012. These safeguards include contractual data protection clauses that impose obligations equivalent to Philippine law on the receiving party.

PH Spark does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing additional contractual and technical safeguards. Members may request information about the specific safeguards in place for any cross-border transfer by contacting privacy@phspark.app.

14Changes to This Privacy Policy

PH Spark may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, PH Spark will notify registered members via email to the address on their account and/or by posting a prominent notice on the PH Spark platform.

The "Last Updated" date at the top of this Policy will always reflect when the most recent revision was made. Where changes are significant, PH Spark will provide a summary of what changed alongside the updated Policy. Continued use of PH Spark following the effective date of any updated Policy constitutes acceptance of the revised terms.

If you do not agree with a material change to this Privacy Policy, you may close your account by contacting support@phspark.app. Your verified balance will be returned via the standard withdrawal process.

15Contact Us & Data Protection Officer

For all questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by PH Spark, please contact our Data Protection Officer. The DPO is responsible for ensuring PH Spark's compliance with the Data Privacy Act of 2012 and is your dedicated point of contact for all data-related matters.

Contact ChannelDetailsResponse Time
Data Protection Officer Emailprivacy@phspark.appWithin 5 business days
General Support Emailsupport@phspark.appWithin 4 hours
Live ChatAvailable on PH Spark platform (login required)Under 3 minutes

Please use the subject line "Privacy Request – [Your Full Name]" when emailing our DPO to ensure your message is routed to the correct team. Include your registered account email address and a clear description of your request or concern.

If you are not satisfied with PH Spark's response to your privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the regulatory authority responsible for enforcement of the Data Privacy Act of 2012.

Bet with Confidence on PH Spark

Your privacy and data security are handled with the same care we put into every part of the platform. Register on PH Spark today, knowing that your personal information is protected under Philippine law and by a team that takes data privacy seriously. Sulit ang pagsali — laro na, Kabayan!

Related Policies & Resources