fmplay Privacy Policy

Welcome to the fmplay Privacy Policy. fmplay ("we," "us," or "our") operates the online gaming and sports betting platform accessible at fmplay.net, serving players across the Philippines — from Metro Manila and Cebu City to Davao, Quezon City, and communities across Mindanao and the Visayas.

We understand that entrusting us with your personal information is a significant act of confidence. This Privacy Policy is designed to be straightforward and honest about what data we collect, why we collect it, how long we keep it, who we may share it with, and what control you have over it. We have written this policy to comply with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations (IRR).

If you have any questions about this policy or how fmplay handles your personal data, please contact our Data Protection Officer (DPO) at [email protected] before using our services.

For the purposes of the Philippine Data Privacy Act of 2012, fmplay is the Personal Information Controller (PIC) in respect of the personal data you provide or that we collect about you through your use of the fmplay platform.

As Personal Information Controller, fmplay determines the purposes for which, and the means by which, your personal data is processed. We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection practices and ensuring our ongoing compliance with RA 10173. You may contact the DPO directly at any time:

• Role: Data Protection Officer, fmplay
• Email: [email protected]
• Subject line: "Data Privacy Enquiry – [Your Account Name]"
• Response time: Within 15 business days of receipt

Where fmplay engages third-party service providers — such as payment processors, identity verification services, or game technology providers — who process personal data on our behalf, those providers act as Personal Information Processors (PIPs) under RA 10173. We ensure all PIPs are bound by appropriate data processing agreements that require them to protect your personal data to a standard at least equivalent to the standards fmplay applies.

fmplay collects personal data through several channels: directly from you when you register or interact with us, automatically through your use of the platform, and occasionally from third-party verification or payment partners. The categories of personal data we collect include:

fmplay uses your personal data for specific, legitimate purposes only. We do not process your data in any way that is incompatible with the purposes for which it was originally collected. Our primary uses include:

• Account management: Creating, maintaining, verifying, and closing your fmplay account; authenticating your identity on each login; communicating account-related updates, security alerts, and policy changes.
• Service delivery: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported payment channels; crediting bonus amounts; enabling access to casino games, sports betting, bingo, sabong, and esports markets.
• Identity verification (KYC): Confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with PAGCOR guidelines and Philippine AML regulations.
• Regulatory compliance: Meeting our obligations under the Anti-Money Laundering Act (AMLA), the Data Privacy Act (RA 10173), and applicable PAGCOR reporting requirements — including filing Covered Transaction Reports (CTRs) and Suspicious Transaction Reports (STRs) with the AMLC where legally required.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the platform.
• Responsible gaming: Monitoring gaming patterns to identify potential signs of problem gambling; applying self-exclusion measures and deposit limits as requested or as required under our responsible gaming obligations.
• Customer support: Responding to your enquiries, resolving disputes, and improving our support processes using interaction data.
• Platform improvement: Analysing aggregated and anonymised usage data to identify technical issues, improve game performance, and enhance the overall fmplay user experience for Filipino players.
• Direct marketing (with consent): Sending promotional offers, bonus announcements, and VIP tier updates via email or SMS — only where you have opted in to receive such communications. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

Under the Philippine Data Privacy Act of 2012, fmplay processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the fmplay Terms & Conditions — including account creation, payment processing, and game access.
• Legal obligation: Processing required for fmplay to comply with applicable Philippine law, including AMLA reporting obligations, PAGCOR regulatory requirements, and NPC data protection mandates.
• Legitimate interests: Processing necessary for fmplay's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and improvement of our services — where those interests are not overridden by your rights and freedoms as a data subject.
• Consent: Processing for direct marketing communications and non-essential cookies, where we have obtained your explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where fmplay relies on legitimate interests as a legal basis, we conduct a balancing test to ensure that our interests do not override your fundamental rights. You have the right to object to processing based on legitimate interests — see Section 10 for details on how to exercise this right.

fmplay does not sell, rent, or trade your personal data to any third party for their independent commercial or marketing purposes. We share your personal data only in the following circumstances:

• Payment processors: GCash (G-Xchange, Inc.), Maya (Voyager Innovations, Inc.), BPI, BDO, Metrobank, and other licensed payment service providers — solely to process deposits, withdrawals, and related financial transactions on your behalf.
• Identity verification providers: Third-party KYC and anti-fraud service providers who assist us in verifying your identity, age, and the authenticity of documents you submit.
• Game technology providers: Licensed online casino and sports betting game providers whose platforms are integrated into fmplay. These providers may receive anonymised player session data necessary for game delivery and fairness auditing.
• Regulatory and law enforcement authorities: The Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and other competent Philippine government authorities — where fmplay is legally obligated to report or disclose information.
• Professional advisors: Lawyers, auditors, and compliance consultants engaged by fmplay who are subject to strict professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of fmplay's assets, your personal data may be transferred to a successor entity — subject to the same privacy protections as set out in this policy.

fmplay uses cookies, web beacons, pixel tags, and similar technologies to operate the platform effectively and to understand how it is used. Cookies are small text files stored on your device when you visit fmplay.net.

You can control and manage cookies at the browser level. Most major browsers — including Chrome, Firefox, Safari, and Edge — allow you to view, block, or delete cookies through their privacy or settings menus. Please note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the fmplay platform.

For Filipino users accessing fmplay from mobile devices on Globe, Smart, DITO, or other networks, please be aware that some mobile browser versions may handle cookie settings differently from desktop browsers. Refer to your device manufacturer's or browser's documentation for guidance.

fmplay implements a comprehensive set of technical, administrative, and physical security measures designed to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. Key security measures include:

• Encryption in transit: All data transmitted between your browser or device and fmplay servers is protected by TLS 1.3 encryption.
• Encryption at rest: Sensitive personal data stored on fmplay servers is encrypted using AES-256 standards.
• Access controls: Employee and contractor access to personal data is strictly role-based. Only personnel with a documented business need may access player data.
• Two-factor authentication: fmplay recommends — and in certain administrative roles, mandates — two-factor authentication to prevent unauthorised account access.
• Regular security testing: fmplay engages independent security professionals to conduct regular penetration testing and vulnerability assessments of our platform infrastructure.
• Incident response: fmplay maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours of discovery and affected individuals as required by RA 10173.

fmplay retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required or permitted by applicable Philippine law. Our general retention schedule is as follows:

• Active account data: Retained for the full duration of your account relationship with fmplay, plus a minimum of five (5) years following account closure — in compliance with AMLA record-keeping requirements and PAGCOR regulatory standards.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Philippine AMLA and its implementing regulations.
• KYC and identity documents: Retained for the duration of the account plus five years, or longer where required by a regulatory investigation or legal proceeding.
• Support communications: Chat transcripts and email records are retained for three (3) years from the date of the interaction, or longer if related to an unresolved dispute or legal claim.
• Marketing consent records: Retained for as long as you hold an active marketing preference, plus two years following withdrawal of consent as evidence of prior lawful processing.
• Cookie and analytics data: Aggregated analytics data is retained in anonymised form indefinitely. Individual session-level data is retained for a maximum of thirteen (13) months.

When your personal data is no longer required, fmplay will securely delete or anonymise it using industry-standard data destruction methods. Where immediate deletion is not technically feasible (for example, in backup systems), the data will be isolated and protected from further active processing until deletion can be completed.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, you have the following rights in relation to your personal data held by fmplay:

• Right to be Informed: You have the right to know what personal data fmplay collects about you, the purposes for which it is processed, and your rights as a data subject — which is the purpose of this Privacy Policy.
• Right to Access: You may request a copy of the personal data fmplay holds about you, together with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data fmplay holds about you. You can update basic account details directly from your account profile page.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and there is no other legal basis for processing. Note that this right is subject to fmplay's legal obligations to retain data under AMLA and PAGCOR regulations.
• Right to Object: You have the right to object to processing of your personal data where fmplay relies on legitimate interests as its legal basis. You also have an absolute right to object to processing for direct marketing purposes.
• Right to Data Portability: You may request a copy of the personal data you have provided to fmplay in a structured, commonly used, machine-readable format.
• Right to File a Complaint: If you believe fmplay has processed your personal data in violation of RA 10173, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.

fmplay is a real-money online gaming platform. In accordance with Philippine law and PAGCOR regulations, access to and participation in any gaming activity on fmplay is strictly limited to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under 21 years of age.

During the registration process, all applicants are required to confirm their date of birth and to submit valid government-issued identification for age verification. Any account found to belong to a person under 21 years of age will be suspended immediately, all funds returned to the original payment source, and all associated personal data securely deleted except where retention is required to document the incident for compliance purposes.

If you believe a minor has created an account on fmplay or that a minor's personal data has been submitted to us without appropriate authorisation, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Some of the third-party service providers fmplay engages — including certain game technology providers, cloud infrastructure providers, and fraud prevention services — may process your personal data outside of the Philippines. Where such cross-border transfers occur, fmplay ensures that appropriate safeguards are in place in accordance with Section 21 of RA 10173 and its IRR.

Safeguards for cross-border transfers may include:

• Contractual clauses that require the recipient to protect personal data to a standard equivalent to Philippine data privacy law.
• Verification that the recipient country has been assessed as providing an adequate level of data protection.
• Binding corporate rules where transfers occur within an affiliated group of companies.
• Your explicit consent, where no other adequate safeguard applies and the transfer is necessary for the performance of your service contract with fmplay.

You may request further information about the specific safeguards applied to any cross-border transfer of your personal data by contacting our Data Protection Officer at [email protected].

The fmplay platform may contain references to third-party services such as licensed payment platforms (GCash, Maya) and game providers. While fmplay carefully selects its partners, we have no control over the privacy practices or data protection policies of those third parties once you navigate away from fmplay.net or interact directly with a third-party service.

We encourage you to review the privacy policies of any third-party service you use in connection with your fmplay account — particularly GCash and Maya, which operate their own independent data processing environments governed by their respective privacy notices. fmplay accepts no responsibility or liability for the content, accuracy, or privacy practices of any third-party website, application, or service.

fmplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the fmplay platform for a period of at least 14 days following the update.
• Where the changes materially affect your rights, send a direct notification to your registered email address.

Your continued use of the fmplay platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how fmplay is protecting your personal information. Previous versions of this policy are available on request from our Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or fmplay's data protection practices, please reach out to us through the following channels:

• Email: [email protected] — Subject: "Privacy Policy Enquiry"
• Live Chat: Available 24 hours a day, 7 days a week via the fmplay platform.
• Response time: Within 15 business days for formal data rights requests; within 24 hours for general privacy enquiries via email; within 5 minutes via live chat.

Our Filipino-speaking support and compliance team is available to assist players from Manila, Cebu, Davao, Quezon City, Makati, and across the Philippines. We are committed to handling all privacy-related matters with the utmost professionalism, fairness, and respect for your rights as a Filipino data subject.