Privacy Policy – how desk games handles your personal information

Overview

This Privacy Policy applies to all personal information collected and processed by desk games through the deskgames.app platform, including its games, account management functions, payment processing, and customer support services. It applies to all registered players and to anyone who visits the platform, regardless of whether they hold an account.

desk games is committed to handling personal information responsibly and in accordance with the Republic Act 10173, also known as the Data Privacy Act of 2012 of the Philippines, and all implementing rules and regulations issued by the National Privacy Commission (NPC). If you are a Filipino player using desk games, your personal information is protected under this law and under the commitments described in this policy.

Reading this policy gives you a clear picture of how your information moves through desk games — from the moment you register an account, through every deposit and bet you make, to the point where your account is closed and your data is eventually deleted. We have tried to write it in plain language rather than legal boilerplate because we think you deserve to actually understand it.

Data Controller

The data controller responsible for personal information collected through desk games is the operator of the deskgames.app platform. As data controller, desk games determines the purposes for which personal information is collected and the means by which it is processed.

For all questions, requests, or complaints related to your personal data at desk games, you may contact us using the details in Section 14 of this policy. desk games has designated a data protection point of contact to handle privacy-related enquiries from players.

Where desk games engages third-party service providers — such as payment processors, identity verification services, or fraud detection providers — those providers act as data processors on behalf of desk games and are bound by data processing agreements that require them to process your information only for the purposes instructed by desk games and in accordance with applicable law.

What Personal Information desk games Collects

desk games collects the minimum personal information needed to operate the platform legally and safely. The categories of information we collect are set out below.

desk games does not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, or health data — as part of standard account registration. If health or other sensitive information is relevant to a responsible gaming interaction, it is handled with additional protections and is used only for the purpose for which it was provided.

How desk games Collects Your Information

desk games collects personal information through three main channels.

Information you give us directly includes everything you enter during registration, any documents you submit for KYC verification, the details you provide when making a deposit or withdrawal, and anything you send to desk games through our support channels.

Information collected automatically is gathered by our platform systems every time you access desk games. This includes your IP address, the device you are using, your browser type, the pages you visit within the platform, and your session duration. This information is used for security monitoring, fraud prevention, and platform performance analysis.

Information from third parties comes from the service providers desk games uses to operate the platform — identity verification services that confirm your identity documents against official records, payment processors that confirm your payment method details, and fraud detection services that provide risk signals based on known patterns of fraudulent behaviour. desk games only requests data from third parties that is necessary for a specific operational purpose.

Why desk games Uses Your Personal Information

Every piece of personal information that desk games collects is used for one or more of the purposes listed below. We do not use your personal information for any purpose that is incompatible with those listed here without first obtaining your consent or establishing another legal basis.

• Account creation and management: To set up and maintain your desk games account, verify your identity, and ensure that only you can access your account.
• Processing deposits and withdrawals: To handle transactions between your payment accounts and your desk games PHP balance, including confirming payment source ownership and processing KYC for withdrawals.
• Providing gaming services: To run the games and betting services you use at desk games, settle bets correctly, and maintain accurate records of your gaming activity.
• Regulatory compliance: To meet the obligations imposed on desk games by Philippine gaming regulations, anti-money laundering laws, and the requirements of any applicable licensing authority. These obligations include identity verification, transaction monitoring, and record-keeping requirements that desk games cannot fulfil without collecting and retaining the relevant data.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats. IP address data and device information are particularly important for this purpose.
• Responsible gaming: To implement and honour the responsible gaming tools you activate — including deposit limits, cooling-off periods, and self-exclusion — and to monitor for indicators of problem gambling as required by responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, and communicate with you about your account.
• Platform improvement: To understand how players use desk games and to improve the platform's performance, reliability, and user experience. Analytical data used for this purpose is aggregated and anonymised where possible.
• Marketing communications: To send you information about desk games promotions and updates if you have opted in to receiving such communications. You can opt out at any time through your account settings or by contacting support.

Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, desk games must have a lawful basis for processing your personal information. The legal bases we rely on are as follows.

• Contractual necessity: Processing required to fulfil the agreement between you and desk games — including operating your account, processing transactions, and settling bets. Without this processing, desk games cannot provide the services you have signed up for.
• Legal obligation: Processing required to comply with Philippine law, including gaming regulations, anti-money laundering requirements, and tax obligations. desk games cannot opt out of these obligations.
• Legitimate interests: Processing carried out for the legitimate interests of desk games or its players where those interests are not overridden by your data protection rights. This includes fraud prevention, security monitoring, and platform analytics. desk games only relies on this basis after considering whether the processing is proportionate and whether it adequately respects your privacy.
• Consent: For marketing communications and for any processing that is not covered by the bases above, desk games will ask for your explicit consent before proceeding. Where consent is the basis for processing, you have the right to withdraw it at any time without affecting the lawfulness of processing that occurred before withdrawal.

Who desk games Shares Your Information With

desk games does not sell your personal information. We share it only with the categories of recipients described below, and only to the extent necessary for the stated purpose.

All third parties with whom desk games shares personal information are required to implement appropriate data protection safeguards. Where a third party processes data on our behalf, we enter into a data processing agreement requiring them to handle your information only as instructed and in accordance with applicable Philippine privacy law.

How Long desk games Keeps Your Information

desk games retains personal information for as long as it is needed for the purpose for which it was collected, or as required by applicable law — whichever is longer. The general retention principles are as follows.

• Active accounts: Your personal information is retained for the duration of your desk games account and for the legally required period following account closure.
• Transaction records: Deposit and withdrawal records, including associated identity information, are retained for a minimum of five years from the date of the transaction as required by Philippine anti-money laundering regulations. This period may be extended where a transaction is subject to an ongoing investigation.
• Gaming activity records: Bet history, game session records, and win/loss data are retained for the period required by the applicable gaming regulatory framework.
• KYC documents: Identity documents submitted for verification are retained for a minimum of five years following account closure or the date of the last relevant transaction.
• Support communications: Records of support interactions are retained for a minimum of two years from the date of the interaction.
• Technical logs: IP address logs and device information are retained for up to 12 months for security and fraud prevention purposes, subject to any extension required by an active investigation.
• Responsible gaming records: Self-exclusion records are retained for the duration of the exclusion period and for a minimum of five years after it ends, to ensure that re-registration restrictions are correctly applied.

When personal information is no longer required and no legal obligation requires its continued retention, desk games deletes or anonymises it securely.

How desk games Protects Your Information

desk games implements technical and organisational security measures designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include the following.

• Encrypted data transmission: All data transmitted between your device and the desk games platform is encrypted using TLS (Transport Layer Security). This protects your login credentials, payment details, and personal information in transit.
• Access controls: Access to systems containing personal information is restricted to desk games personnel and service providers with a documented operational need. Access is controlled through role-based permissions and multi-factor authentication for administrative access.
• Payment data handling: Full payment account numbers are not stored by desk games. Payment processing is handled by certified payment service providers. desk games stores only the minimum payment reference information needed to link a transaction to your account.
• Security monitoring: desk games' systems are monitored for unusual activity, unauthorised access attempts, and other security incidents. Identified incidents are assessed and responded to in accordance with desk games' incident response procedures.
• Data breach notification: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, desk games will notify the National Privacy Commission and affected players within the timeframes required by the Data Privacy Act.

While desk games takes its security obligations seriously, no online platform can guarantee absolute security. Players play an important role in protecting their own accounts by maintaining strong, unique passwords and by not sharing their login credentials with anyone. If you suspect unauthorised access to your account, contact desk games support immediately.

Cookies and Similar Technologies

desk games uses cookies and similar technologies to make the platform work correctly and to understand how it is being used. The categories of cookies used by desk games are described below.

The toggles above illustrate your cookie preferences. To manage your actual cookie settings for the desk games platform, use the cookie preference centre accessible from your account settings or from the cookie notice that appears on your first visit.

You can also control cookies through your browser settings. Disabling essential cookies will prevent the desk games platform from functioning correctly.

Your Data Rights as a Filipino Player

Under the Philippine Data Privacy Act of 2012 and desk games' own commitments, you have the following rights with respect to your personal information held by desk games. To exercise any of these rights, contact desk games using the details in Section 14.

desk games will respond to all data rights requests within 30 days of receiving the request. Where the request is complex or where desk games receives a high volume of requests simultaneously, this period may be extended by a further 30 days with notification to you.

If you are not satisfied with how desk games has handled your personal information or responded to a data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

Minors

desk games is strictly for adults aged 21 and above. desk games does not knowingly collect personal information from persons under 21 years of age. If you are under 21, you may not register an account or use any part of the desk games platform.

If desk games discovers that personal information has been collected from a person under 21 — whether through a false date of birth during registration or through any other means — that account will be closed immediately, any funds associated with the account will be returned to the verified payment source, and the personal information of the minor will be deleted from desk games' systems as quickly as the relevant regulatory retention obligations permit.

If you believe that a minor has registered an account at desk games, please contact us immediately at the address in Section 14.

Changes to This Privacy Policy

desk games may update this Privacy Policy from time to time. Changes may reflect updates to the platform, changes in the services we offer, developments in applicable Philippine privacy law, or guidance from the National Privacy Commission.

When desk games makes material changes to this policy, we will notify registered players through the platform or by email to their registered address before the changes take effect, with a minimum notice period of 14 days except where a shorter period is required by law or regulatory obligation. The date of the most recent update is always shown at the top of this page.

The current version of this Privacy Policy is always available at deskgames.app/privacy-policy. Continuing to use desk games after a policy update takes effect constitutes your acknowledgement of the revised policy. If you do not agree with a material change, you should stop using the platform and close your account before the change takes effect.

Contact desk games About Privacy

For all data privacy enquiries, requests to exercise your rights under the Data Privacy Act, or complaints about how desk games has handled your personal information, contact us at:

For formal complaints that have not been resolved through desk games' support process, you have the right to contact the National Privacy Commission of the Philippines directly. The NPC's contact information is available on their official website.