ophopen Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ophopen ("ophopen," "we," "us," or "our") collects, uses, stores, shares, and protects personal information in connection with your use of the ophopen online gaming platform available at ophopen.net (the "Platform").

ophopen is committed to safeguarding the privacy of every Filipino player who registers and plays on our Platform. This Policy has been drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the National Privacy Commission (NPC) issuances, and applicable PAGCOR data governance requirements.

This Policy applies to all users of the ophopen Platform regardless of the device or method of access, including desktop browsers, mobile browsers, and any ophopen-branded applications. It covers data collected online and through any correspondence you have with our support team.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, ophopen acts as the Personal Information Controller (PIC) with respect to personal data collected through the Platform. ophopen determines the purposes and means of processing your personal information and is responsible for ensuring that processing activities comply with applicable Philippine privacy law.

ophopen has designated a Data Protection Officer (DPO) who oversees this Policy and handles all data privacy-related requests, concerns, and complaints from Filipino players. Contact details for the DPO are provided in Section 14 of this Policy.

3. Data We Collect

3.1 Information You Provide Directly

When you register an ophopen account or interact with our Platform, we collect the following categories of personal information that you provide directly:

• Full legal name, date of birth, and nationality
• Philippine mobile number and email address
• Residential address (city, province, region within the Philippines)
• Government-issued identification documents submitted for KYC verification (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, Voter's ID)
• Proof of address documentation
• Payment method details — including GCash or Maya account identifiers, bank account details (BPI, BDO, Metrobank), or cryptocurrency wallet addresses for USDT TRC20
• Source-of-funds declarations where required by PAGCOR anti-money laundering regulations
• Responsible gaming self-declarations and limit-setting preferences
• Communications with our support team, including chat logs and email correspondence

3.2 Information Collected Automatically

When you access the ophopen Platform, certain information is collected automatically through cookies, log files, and similar technologies:

3.3 Information from Third Parties

ophopen may receive personal information about you from third parties in certain circumstances, including:

• Identity verification providers engaged to authenticate your KYC documents
• Payment processors (e.g., GCash, Maya, BPI) confirming transaction details
• PAGCOR or other regulatory authorities providing player self-exclusion registry data
• Fraud detection and anti-money laundering screening services

Information received from third parties is handled with the same level of care and security as information you provide directly.

4. How We Use Your Data

ophopen uses the personal information we collect for the following purposes:

• Account creation and management: To register your ophopen account, verify your identity, maintain your account profile, and provide you with access to the Platform.
• KYC and regulatory compliance: To verify your age (21+), identity, and eligibility to participate in real-money gaming in the Philippines, as required by PAGCOR.
• Payment processing: To facilitate deposits and withdrawals in Philippine Peso via your chosen payment methods, including GCash, Maya, BPI, BDO, Metrobank, and others.
• Anti-money laundering (AML) compliance: To monitor transactions for suspicious activity and comply with the Anti-Money Laundering Act of 2001 (RA 9160) and its amendments.
• Responsible gaming: To enforce deposit limits, session controls, self-exclusion requests, and to identify players who may be at risk of problem gambling.
• Customer support: To respond to your queries, resolve disputes, and improve our support service quality.
• Platform security and fraud prevention: To detect and prevent unauthorized access, cheating, bonus abuse, collusion, and other fraudulent activities on the ophopen Platform.
• Service improvement: To analyze usage patterns, identify technical issues, and improve the performance and user experience of the ophopen Platform.
• Marketing communications: To send you promotional offers, bonuses, and updates about new games — but only where you have given your explicit consent to receive such communications. You may opt out at any time.
• Legal obligations: To comply with court orders, regulatory directives from PAGCOR, or requests from Philippine law enforcement authorities where legally required.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ophopen processes your personal information on the following legal bases:

• Consent (Section 12[a], RA 10173): For optional processing activities such as marketing communications and certain cookie placements, where you have given your freely given, specific, and informed consent.
• Contractual necessity (Section 12[b], RA 10173): For processing required to perform our obligations under the Terms and Conditions you accepted when registering your ophopen account, including account management and payment processing.
• Legal obligation (Section 12[c], RA 10173): For processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine laws.
• Legitimate interests (Section 12[f], RA 10173): For fraud prevention, platform security, and service improvement activities, where our legitimate interests are not overridden by your fundamental rights and freedoms.

6. Data Sharing & Disclosure

6.1 We Do Not Sell Your Data

ophopen does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Full stop.

6.2 Permitted Disclosures

ophopen may share your personal information with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• PAGCOR: As required by our operating license, including player activity reports, AML-related disclosures, and responses to regulatory inquiries.
• Payment processors: GCash, Maya, BPI, BDO, Metrobank, Coins.ph, 7-Eleven Cliqq, and other accredited payment service providers — solely to process your transactions.
• Identity verification providers: Third-party KYC and document verification services engaged by ophopen to authenticate your identity documents in compliance with PAGCOR requirements.
• Technology and hosting providers: Cloud infrastructure and platform technology partners who process data on ophopen's behalf under strict data processing agreements that comply with RA 10173.
• Fraud and AML screening services: Third-party services used to screen transactions and accounts for money laundering, fraud, and other financial crimes.
• Philippine law enforcement and courts: Where ophopen is required by law, court order, or valid legal process to disclose your personal information.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ophopen's business assets, your personal data may be transferred as part of that transaction. ophopen will notify affected users via the Platform and email in advance of any such transfer, and the acquiring entity will be required to honor the commitments made in this Privacy Policy.

7. Cookies & Tracking Technologies

7.1 Types of Cookies Used

ophopen uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly necessary cookies: Essential for the Platform to function — managing your login session, maintaining account security, and enabling core gaming features. These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your language preferences, display settings, and other personalization options to improve your experience on ophopen.
• Analytics cookies: Help ophopen understand how players use the Platform — which pages are visited most, how long sessions last, and where players encounter issues. Data is aggregated and anonymized where possible.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized login attempts, and other security threats.

7.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in and using core ophopen features. Please consult your browser's help documentation for instructions on managing cookie preferences.

8. Data Retention

ophopen retains your personal data for as long as is necessary to fulfill the purposes set out in this Policy and to comply with our legal obligations under Philippine law:

• Account data: Retained for the duration of your account's existence and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and Philippine AML law.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act.
• KYC documents: Retained for a minimum of five (5) years after the end of the business relationship, or longer if required by a specific PAGCOR directive or law enforcement hold.
• Support communications: Retained for three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the period of your consent and for a reasonable period thereafter as evidence of that consent.

Upon expiry of the applicable retention period, ophopen will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by ophopen:

To exercise any of these rights, please contact ophopen's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." ophopen will respond to verified requests within fifteen (15) business days as required by NPC regulations. We may ask you to verify your identity before processing your request.

10. Data Security

ophopen implements appropriate technical and organizational security measures to protect your personal information against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ophopen Platform.
• Encrypted storage of sensitive data including KYC documents and payment method details at rest.
• Role-based access controls ensuring that ophopen staff members can only access personal data relevant to their specific job function.
• Regular security audits and penetration testing conducted by independent security professionals.
• Multi-factor authentication options available for all ophopen player accounts.
• Incident response procedures aligned with NPC breach notification requirements under RA 10173.

In the event of a personal data breach that is likely to result in significant harm to affected players, ophopen will notify the National Privacy Commission and affected individuals within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.

11. Children's and Minors' Privacy

The ophopen Platform is strictly intended for individuals who are at least 21 years of age, in compliance with PAGCOR regulations governing real-money gaming in the Philippines. ophopen does not knowingly collect or process personal data from any person under the age of 21.

If ophopen discovers or is notified that a person under 21 has registered an account or provided personal data, we will immediately suspend the account, delete the personal data without undue delay, and report the incident to PAGCOR as required. Any balance associated with an underage account will be forfeited in accordance with PAGCOR rules.

12. Cross-Border Data Transfers

ophopen primarily processes and stores personal data within the Philippines or in jurisdictions that provide an adequate level of data protection as recognized under Philippine law. Where personal data is transferred outside the Philippines — for example, to cloud infrastructure providers or identity verification services operating in other countries — ophopen ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses recognized by the NPC.
• Transfers only to countries or organizations that provide an equivalent level of data protection.
• Compliance with NPC Circular No. 17-01 and applicable NPC guidelines on cross-border data flows.

You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting our Data Protection Officer.

13. Updates to This Privacy Policy

ophopen may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When material changes are made, we will post the updated Policy on this page with a revised effective date and, where practicable, notify registered players via email or an in-platform notification.

Your continued use of the ophopen Platform after the posting of an updated Privacy Policy constitutes your acknowledgment of the changes. If you disagree with any updated terms, you should cease using the Platform and may request account closure and data deletion through our support team.

14. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ophopen, please contact our Data Protection Officer:

• Email: [email protected] — Subject: "Data Privacy Request"
• Support Hours: 24 hours a day, 7 days a week (Philippine Standard Time, UTC+8)
• Service Area: Manila, Cebu, Davao, and all regions of the Philippines

If you are not satisfied with ophopen's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through their official channels.