tollph Privacy Policy

tollph ("we," "us," or "our") operates the online casino and sportsbook platform accessible at tollph.net and is committed to protecting the privacy and personal data of every player who uses our services. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).

This Privacy Policy applies to all personal data collected through the tollph website, any associated mobile or progressive web application, live chat support channels, email correspondence, and any other means through which you interact with the tollph platform.

By registering a tollph account, making a deposit, or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should not use the tollph platform and should contact our support team to request account closure.

For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for the personal information processed through the tollph platform is the entity that holds the PAGCOR licence under which tollph operates. tollph is registered and operates within the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to all applicable Philippine data protection and gaming regulations.

tollph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact the tollph DPO by emailing [email protected] with the subject line "Data Privacy Request."

tollph collects personal data through several channels: directly from you when you register or contact us, automatically through your use of the platform, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect include:

tollph does not collect or process sensitive personal information as defined under RA 10173 (such as health records, political affiliations, or sexual orientation) unless this is strictly required by PAGCOR regulations or Philippine law, in which case explicit consent will be sought.

tollph processes your personal data only for specific, legitimate purposes directly related to operating the tollph platform and fulfilling our legal obligations. The primary purposes for which your personal data is used are:

• Account registration and management: Creating and maintaining your tollph player account, verifying your identity and age (21+), and administering your account settings and preferences.
• Transaction processing: Processing deposits via GCash, Maya, BPI, BDO, and other approved channels; crediting winnings to your wallet; and processing withdrawal requests to your registered payment method.
• Regulatory compliance: Fulfilling obligations under PAGCOR licensing requirements, the Philippine Anti-Money Laundering Act (AMLA), and related regulations, including the filing of suspicious transaction reports where required by law.
• Fraud prevention and security: Detecting and preventing unauthorised access, account fraud, bonus abuse, collusion, and other security threats to the platform and to individual players.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, administering self-exclusion and deposit limit tools, and complying with PAGCOR responsible gaming standards.
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance through live chat, email, and other support channels.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the performance, features, and user experience of the tollph platform.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — but only to players who have explicitly opted in to receiving marketing communications. You may opt out at any time via your account settings or by contacting support.

Under the Philippine Data Privacy Act of 2012, tollph relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to fulfil our obligations to you under the tollph Terms and Conditions — including account management, payment processing, and game delivery — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, NPC data privacy requirements, BIR tax reporting, and other applicable Philippine laws is carried out on the basis of a legal obligation.
• Consent: Where tollph relies on your consent as the legal basis for processing — primarily for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Legitimate interests: Certain processing activities, such as fraud detection, platform security monitoring, and platform analytics, are carried out on the basis of tollph's legitimate interests in protecting the integrity of the platform and its players, provided those interests are not overridden by your fundamental rights and freedoms.

tollph does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your personal data is shared only in the following limited circumstances:

• Payment processors: We share financial data (such as your GCash mobile number or bank account reference) with authorised payment service providers solely for the purpose of processing your deposits and withdrawals. These providers are contractually bound to process your data only as directed by tollph and in accordance with applicable Philippine data protection laws.
• Identity verification providers: To fulfil KYC requirements mandated by PAGCOR and AMLA, we may engage accredited third-party identity verification services to verify the authenticity of documents you submit.
• Game content providers: JILI, Evolution Gaming, and other licensed game studios that provide games on the tollph platform may receive limited technical data (such as a pseudonymous player identifier and wager data) necessary for game functionality. These providers operate under strict data processing agreements.
• Regulatory and law enforcement authorities: tollph will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine authorities when required to do so by law, regulation, court order, or PAGCOR directive.
• Professional advisers: tollph's legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

The tollph platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised gaming experience. Cookies are small text files stored on your device when you visit the tollph website. The types of cookies we use are:

• Strictly necessary cookies: These cookies are essential for the tollph platform to function and cannot be disabled. They are used to maintain your login session, remember your language preferences, and ensure platform security. No personal data is collected via strictly necessary cookies beyond what is technically required.
• Performance and analytics cookies: These cookies collect anonymised information about how players interact with the tollph platform, including which pages are visited most frequently and whether error messages are received. This data is used solely to improve platform performance.
• Functional cookies: These cookies enable the platform to remember your account preferences (such as game display settings) to provide a more personalised experience.
• Session security cookies: Short-lived cookies used to protect your account session from cross-site request forgery (CSRF) and other web-based security threats.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from using core platform features including account login. tollph does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes.

tollph retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by Philippine law and PAGCOR regulations. The following general retention principles apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Where data must be retained longer due to an active regulatory investigation, legal proceedings, or PAGCOR instruction, retention will continue until the matter is resolved.

tollph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption: All data stored on tollph servers is encrypted using AES-256 encryption. All data transmitted between your device and the tollph platform is protected using TLS 1.3.
• Access controls: Access to personal data within tollph's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data privacy training.
• Payment tokenisation: tollph does not store raw payment credentials. GCash, Maya, and card payment details are tokenised by the respective payment processor. tollph holds only a non-reversible reference token.
• Two-factor authentication (2FA): tollph players are encouraged to enable 2FA on their accounts for additional login security. Internal tollph systems require 2FA for all staff access.
• Penetration testing: The tollph platform undergoes regular security assessments and penetration testing by independent cybersecurity professionals to identify and remediate vulnerabilities.
• Incident response: tollph maintains a documented data breach response plan. In the event of a confirmed breach affecting personal data, affected players and the NPC will be notified within the periods required under RA 10173.

While tollph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for logging out of your account when using shared or public devices.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tollph. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request."

• Right to be informed: You have the right to know how your personal data is being collected, processed, and used by tollph — which this Privacy Policy fulfils.
• Right of access: You have the right to request a copy of the personal data that tollph holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by tollph be corrected without undue delay.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to tollph's overriding legal obligations under PAGCOR and AMLA regulations.
• Right to object: You have the right to object to the processing of your personal data on the basis of legitimate interests, and to object at any time to the use of your data for direct marketing purposes.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to tollph in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to complain: If you believe that tollph has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The tollph platform is strictly restricted to individuals who are 21 years of age or older, as required by Philippine law and PAGCOR regulations governing online gaming. tollph does not knowingly collect personal data from persons under 21 years of age.

As part of the registration process, tollph requires all players to confirm their date of birth and submit valid government-issued identification for age verification. Any account found to have been registered by a person under 21 years of age will be immediately closed, any deposits refunded (subject to verification), and any winnings forfeited in full.

As an online platform that uses internationally operated cloud infrastructure and licensed game content providers, some of your personal data may be processed or stored on servers located outside the Philippines. Where cross-border data transfers occur, tollph ensures that appropriate safeguards are in place in accordance with NPC guidelines, including:

• Data processing agreements that require recipient entities to maintain data protection standards equivalent to those required under RA 10173.
• Transfers occurring only to jurisdictions or entities that have been assessed by tollph's DPO as providing an adequate level of personal data protection.
• Standard contractual clauses or binding corporate rules where required by NPC guidelines for specific transfer types.

In all cases, the purpose of any cross-border transfer is limited to delivering the tollph service to you — including game provision, payment processing, and customer support — and your data is not processed in a foreign jurisdiction for purposes beyond this scope.

tollph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, tollph will notify registered players by email and by displaying a prominent notice on the tollph platform prior to the changes taking effect.

The date at the top of this page will always reflect the date of the most recent revision. Your continued use of the tollph platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you should discontinue use of the platform and contact our support team to close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how tollph protects your personal data. Archived versions of previous Privacy Policy editions are available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tollph handles your personal data, please reach out to our Data Protection Officer. We are committed to addressing all privacy-related enquiries promptly and transparently.

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 inside your tollph account dashboard — the fastest way to get a response from our Filipino support team.
• Regulatory authority: If you are not satisfied with tollph's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.