This Privacy Policy explains how tableph collects, uses, stores, shares, and protects personal data provided by Filipino players and visitors to the tableph platform. We are committed to full compliance with the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations of the National Privacy Commission (NPC). Please read this document carefully.
tableph ("we," "us," or "our") operates the online casino and sports betting platform accessible at tableph.one and its associated subdomains (the "Platform"). In the course of operating the Platform and providing gaming services to Filipino players, tableph necessarily collects and processes certain categories of personal information.
This Privacy Policy ("Policy") sets out what personal data tableph collects from you, why we collect it, how we use and store it, who we may share it with, how long we keep it, and what rights you have over your personal data under Philippine law. This Policy applies to all registered players, account applicants, visitors to the tableph Platform, and any individual who interacts with tableph's customer support or marketing channels.
This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are published on the tableph Platform.
For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, tableph is the Personal Information Controller with respect to the personal data collected through the Platform.
tableph has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. The DPO can be contacted at the details provided in Section 17 of this Policy.
The Platform operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). Certain data processing activities — particularly those related to anti-money laundering compliance and responsible gaming — are carried out in fulfilment of tableph's obligations as a PAGCOR-licensed operator.
tableph collects the following categories of personal data from players and Platform visitors:
tableph collects personal data through the following means:
| Collection Method | Examples of Data Collected |
|---|---|
| Account Registration | Name, mobile number, email, date of birth, username, password |
| KYC Verification Process | Government ID documents, selfie/photo, proof of address |
| Deposits & Withdrawals | GCash/Maya number, bank details, transaction amounts and references |
| Platform Usage (Automatic) | IP address, device data, session logs, gameplay records, cookies |
| Customer Support Interactions | Chat logs, email content, complaint records |
| Promotional Participation | Bonus claim records, survey responses, promotional preferences |
| Third-Party Identity Verification | Identity verification results from KYC service providers |
tableph does not collect personal data from publicly available sources or social media platforms for profiling purposes beyond what is necessary for fraud prevention and regulatory compliance.
tableph processes your personal data for the following purposes, each of which has a corresponding lawful basis under the Data Privacy Act of 2012:
Purpose: To register your tableph account, verify your identity and age eligibility (21+), manage your account settings, and maintain accurate player records.
Legal Basis: Performance of contract (the tableph Terms & Conditions).
Purpose: To process your deposits via GCash, Maya, BPI, BDO, and other supported Philippine payment methods; to process your withdrawal requests to your verified payment accounts; and to maintain accurate financial records.
Legal Basis: Performance of contract; compliance with legal obligations (PAGCOR financial reporting requirements).
Purpose: To fulfil tableph's obligations under the Anti-Money Laundering Act (AMLA, Republic Act No. 9160 as amended), including transaction monitoring, suspicious transaction reporting, and customer due diligence.
Legal Basis: Compliance with legal obligations.
Purpose: To detect, investigate, and prevent fraud, money laundering, account takeover, bonus abuse, and other prohibited conduct on the tableph Platform.
Legal Basis: Legitimate interests of tableph (protecting the platform and its players from financial and reputational harm).
Purpose: To enforce the 21+ age restriction; to apply self-exclusion and cooling-off periods; to monitor gaming behavior for indicators of problem gambling; and to comply with PAGCOR's responsible gaming requirements.
Legal Basis: Legal obligation (PAGCOR responsible gaming requirements); protection of vital interests of players.
Purpose: To respond to your enquiries, resolve complaints, and improve tableph's support services.
Legal Basis: Performance of contract; legitimate interests.
Purpose: To send you information about tableph promotions, new games, bonuses, and platform updates that may interest you, where you have provided your consent.
Legal Basis: Consent (you may withdraw this consent at any time as described in Section 13).
Purpose: To analyse Platform usage patterns, game preferences, and technical performance in order to improve the tableph experience for Filipino players.
Legal Basis: Legitimate interests (improving platform quality and player experience); processing of anonymised or aggregated data where possible.
tableph does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary and with appropriate contractual data protection safeguards in place:
tableph shares data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities as required by law. This includes mandatory suspicious transaction reports (STRs) and covered transaction reports (CTRs) under the AMLA.
Financial data necessary to process your transactions is shared with GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, Metrobank, and other Philippine payment processors. These providers process your data under their own privacy policies and applicable Philippine data protection regulations.
KYC document data may be processed by third-party identity verification service providers engaged by tableph under data processing agreements that require compliance with the Data Privacy Act of 2012.
Game providers such as JILI, PG Soft, and Pragmatic Play may receive anonymised or pseudonymised player session data necessary to operate their game systems and prevent cheating. tableph does not share your full identity data with game providers.
tableph engages third-party providers for cloud hosting, cybersecurity, fraud detection, and platform monitoring. These providers operate under contractual obligations to process data only on tableph's instructions.
tableph may share data with legal advisors, auditors, and compliance consultants on a need-to-know basis in connection with regulatory obligations or legal proceedings.
tableph retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the minimum retention periods required by Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | PAGCOR licensing requirements; AMLA |
| KYC Documents | Duration of account + 5 years post-closure | AMLA; PAGCOR customer due diligence requirements |
| Financial Transaction Records | Minimum 5 years from transaction date | AMLA; PAGCOR financial record requirements |
| Game Play History | Duration of account + 3 years post-closure | Legitimate interests; PAGCOR requirements |
| Self-Exclusion Records | Indefinite (PAGCOR requirement) | Legal obligation; responsible gaming compliance |
| Customer Support Records | 3 years from last interaction | Legitimate interests; dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Accountability under DPA |
| Technical & Device Logs | 12 months on a rolling basis | Security and fraud prevention |
Upon expiry of the applicable retention period, tableph will securely delete or anonymise your personal data in accordance with its data disposal procedures. Anonymised data that can no longer be linked to any identifiable individual may be retained for statistical and analytical purposes indefinitely.
tableph implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include, but are not limited to:
Notwithstanding the above measures, no internet-based system is entirely immune from security risks. tableph cannot guarantee absolute security of data transmitted over the internet, and you transmit data to tableph at your own risk. You are responsible for maintaining the confidentiality of your own account credentials.
tableph uses cookies and similar tracking technologies on its Platform to support platform functionality, security, and analytics. The following categories of cookies are used:
These cookies are essential for the tableph Platform to function. They include session cookies that maintain your logged-in state, security tokens used for OTP verification and CSRF protection, and cookies that remember your language and accessibility preferences. You cannot opt out of strictly necessary cookies without impairing Platform functionality.
These cookies collect anonymised or pseudonymised information about how players use the Platform — for example, which games are most accessed, which pages have the highest exit rates, and average session durations. This data helps tableph improve the Platform experience for Filipino players. tableph uses only first-party analytics or privacy-compliant third-party analytics tools for this purpose.
tableph uses device fingerprinting and session tracking cookies as part of its fraud detection and responsible gaming systems. These cookies help tableph detect unusual login patterns, prevent account takeover, and identify players who may have applied for self-exclusion.
Some of tableph's third-party service providers — including game content providers, cloud infrastructure providers, and KYC verification services — may process personal data outside of the Philippines. Where such transfers occur, tableph ensures that appropriate safeguards are in place to protect your personal data in accordance with the standards required by the Data Privacy Act of 2012 and NPC regulations on cross-border data flows.
Such safeguards may include: contractual data protection clauses requiring the recipient to maintain equivalent data protection standards; processing only within jurisdictions recognised by the NPC as providing adequate data protection; or other mechanisms approved by the NPC for lawful cross-border data transfers.
tableph does not transfer player data to jurisdictions that do not provide adequate data protection safeguards without your explicit consent or without a lawful basis under the DPA.
tableph collects date of birth during registration and requires submission of a Philippine government-issued ID for KYC verification. This age verification process is a core data processing activity carried out as a legal obligation under PAGCOR's licensing requirements for online casino operators in the Philippines.
If you believe that a minor has registered a tableph account or submitted personal data to the Platform without authorisation, please contact our Data Protection Officer immediately at [email protected] so that the matter can be addressed without delay.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by tableph. To exercise any of these rights, contact our Data Protection Officer using the details in Section 17. tableph will respond to all verified data subject requests within thirty (30) days of receipt.
These are your legally protected rights as a tableph player and data subject under Republic Act No. 10173.
You have the right to be informed whether tableph holds personal data about you, the categories of data held, the purposes for which it is processed, and who it has been shared with. This Policy fulfils a significant part of that obligation.
You may request a copy of the personal data tableph holds about you. tableph will provide this in a structured, commonly used format. Most account-level data is accessible directly within your tableph account dashboard.
You have the right to request correction of any inaccurate, outdated, or incomplete personal data tableph holds about you. Basic contact details can be updated directly within your account settings. KYC data corrections require support team assistance.
In certain circumstances, you may request that tableph delete your personal data. Note that tableph may be legally required to retain certain data (such as financial and KYC records under the AMLA) even after account closure, and these legal retention obligations take precedence.
You have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted to another personal information controller where technically feasible and where the processing is based on your consent or a contract.
You may object at any time to tableph processing your personal data for direct marketing purposes. You may also object to processing based on legitimate interests where your individual rights and freedoms override those interests. Objections do not apply to processing required by law.
If you believe tableph has handled your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. You should first contact tableph's DPO to attempt resolution before escalating to the NPC.
Under the Data Privacy Act of 2012, you are entitled to be indemnified for any damages sustained by reason of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data, subject to applicable provisions of Philippine law.
Where processing of your personal data is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal, nor does it affect processing carried out on other legal bases.
tableph may send marketing communications — including promotional offers, new game announcements, bonus notifications, and platform updates — to your registered email address, Philippine mobile number, or via push notifications where you have provided explicit consent for such communications during or after account registration.
You may opt out of marketing communications at any time by: (a) clicking the "unsubscribe" link in any marketing email; (b) updating your communication preferences in your tableph account settings under "Notification Preferences"; or (c) contacting tableph support and requesting removal from marketing lists.
Opting out of marketing communications does not affect your receipt of transactional communications, which include account security alerts, OTP messages, deposit confirmations, withdrawal notifications, and responses to your support enquiries. These transactional messages cannot be disabled as they are necessary for the operation of your tableph account.
As a PAGCOR-licensed online casino operator, tableph is a covered person under the Anti-Money Laundering Act (AMLA, Republic Act No. 9160, as amended by Republic Acts No. 9194, 10167, 10365, and 11521). tableph is legally obligated to:
AMLA reporting obligations take precedence over data confidentiality obligations under normal circumstances. tableph cannot provide advance notice of STR or CTR filings to affected players, as this is prohibited under the AMLA.
If you have a concern or complaint about how tableph has handled your personal data, you should first contact our Data Protection Officer using the details provided in Section 17 of this Policy. Please describe your concern in detail and include your registered tableph account email address or mobile number for verification purposes.
tableph will acknowledge your complaint within 72 hours and will endeavour to provide a substantive response or resolution within thirty (30) days of receipt. For complex matters, tableph will notify you if additional time is required and provide a revised timeframe.
If you are not satisfied with tableph's response, or if tableph fails to respond within the required timeframe, you have the right to lodge a formal complaint with the:
5th Floor, Philippine International Convention Center (PICC) Forum Building, Vicente Sotto Street, Pasay City, Metro Manila, Philippines. The NPC is the government body mandated to administer and implement the Data Privacy Act of 2012.
tableph reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, regulatory guidance from the NPC or PAGCOR, or improvements to our platform and services.
When we make material changes to this Policy — that is, changes that significantly affect your rights or how your personal data is processed — tableph will notify registered players via email and/or an in-platform notification at least fourteen (14) days before the amended Policy takes effect.
The current version of this Privacy Policy, including its effective date, is always accessible on this page. We encourage you to review this Policy periodically to remain informed about how tableph protects your personal data.
For all privacy-related enquiries, data subject right requests, or complaints, please contact tableph's designated Data Protection Officer (DPO) through the following channels:
When contacting the DPO, please include your full name, registered tableph account email or mobile number, a clear description of your request or concern, and any supporting information that may assist tableph in processing your request efficiently.
A plain-language summary of the most important data protection commitments tableph makes to every Filipino player.
Every connection between your phone or computer and the tableph Platform is secured with TLS 1.3 encryption. Whether you're logging in from BGC or checking your balance from Davao, your data travels securely — not as readable text.
tableph's data practices are designed to comply with Republic Act No. 10173, the Philippines' Data Privacy Act. We take NPC guidelines seriously and have appointed a Data Protection Officer to ensure ongoing compliance — not just at launch, but continuously.
tableph will never sell your personal data to advertisers, data brokers, or third-party marketers. Your data is used to operate your account, comply with our legal obligations, and improve the tableph platform — full stop. It is not a product tableph monetises.
The Data Privacy Act gives Filipino players nine distinct rights over their personal data. tableph publishes these rights in plain English in this Policy and has a dedicated process — with a 30-day response commitment — for handling every data rights request.
tableph is legally required to report certain transactions to the Anti-Money Laundering Council (AMLC). Rather than hiding this obligation, we disclose it openly. This requirement exists to protect the Philippine financial system — and ultimately, honest players like you.
tableph publishes its data retention schedule directly in this Policy. You can see exactly how long each category of your data is kept and why. tableph does not retain data indefinitely "just in case" — retention periods are matched to legal obligations and legitimate operational needs.
tableph protects your personal data under Philippine law and PAGCOR regulations. Register with confidence, enjoy 500+ certified games, and withdraw your winnings to GCash in minutes. Filipino players aged 21 and above only.
21+ only. Gambling involves risk. Play responsibly. PAGCOR regulated. Data protected under RA 10173.