Your privacy matters to istarph. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a registered player on the istarph platform.
Summary: istarph collects only the personal data necessary to operate a safe, compliant, and enjoyable gaming platform for Filipino players. We do not sell your data to third parties. We retain your data only as long as required by law or legitimate business need. You have the right to access, correct, and request deletion of your personal data at any time.
istarph ("we", "us", "our") is committed to protecting the privacy and personal data of all users of the istarph platform (the "Platform"). This Privacy Policy describes how istarph collects, uses, stores, shares, and protects personal information in connection with your use of the Platform, including the istarph website at istarph.net and all associated services.
This Privacy Policy is issued in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines (the "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). By registering an account or using the istarph Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
This Privacy Policy should be read together with istarph's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, istarph is the personal information controller responsible for your personal data collected through the Platform.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.
istarph collects the following categories of personal data from registered players and Platform visitors:
istarph collects personal data through the following means:
| Collection Method | Examples |
|---|---|
| Direct submission | Registration form, KYC document upload, payment details entry, support contact forms |
| Automated collection | Cookies, server logs, session tracking, device fingerprinting during Platform use |
| Third-party sources | KYC verification providers, payment processors, fraud detection services, and regulatory databases |
| Gaming activity | Automatically generated records of all wagers, game outcomes, and account transactions |
istarph uses your personal data for the following purposes:
istarph processes your personal data on the following legal bases under the Data Privacy Act of 2012:
istarph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:
istarph engages third-party service providers to support the operation of the Platform. These providers are contractually bound to process your data only on istarph's instructions and in accordance with applicable data protection law. Categories of service providers include:
istarph may disclose your personal data to government agencies, regulatory bodies, or law enforcement authorities where required by applicable Philippine law, court order, or regulatory directive. This includes disclosures to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) where legally required.
In the event of a merger, acquisition, restructuring, or sale of all or part of istarph's business, your personal data may be transferred to the acquiring entity as part of that transaction. istarph will notify affected users of any such transfer and ensure that the receiving entity is bound by data protection obligations no less protective than those set out in this Policy.
No data selling: istarph will never sell your personal data to advertisers, data brokers, or any other third party for commercial purposes. Your data is used solely to operate and improve the istarph Platform and to comply with our legal obligations.
istarph uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the istarph website. The following categories of cookies are used:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, fraud prevention | Yes — cannot be disabled |
| Functional | Remembering your language preferences, game settings, and responsible gaming tool configurations | Optional |
| Analytics | Understanding how players navigate the Platform to improve usability and content | Optional — requires consent |
| Marketing | Delivering relevant promotional content and tracking the effectiveness of istarph campaigns | Optional — requires consent |
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect the functionality of the istarph Platform, including your ability to log in and play games. For analytics and marketing cookies, you may withdraw consent at any time by adjusting your cookie preferences in your account settings.
istarph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years after account closure |
| KYC verification documents | Duration of account plus 5 years after account closure (AML requirement) |
| Financial transaction records | 10 years from the date of the transaction (AMLC requirement) |
| Gaming activity records | Duration of account plus 3 years after account closure |
| Customer support communications | 3 years from the date of the last communication |
| Marketing consent records | Until consent is withdrawn, plus 1 year thereafter |
| Technical and usage logs | 13 months from collection |
Upon expiry of the applicable retention period, istarph will securely delete or anonymise your personal data in accordance with its data disposal procedures. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be used to identify you.
istarph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
Despite these measures, no data transmission over the internet or electronic storage system is completely secure. istarph cannot guarantee absolute security of your personal data. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, istarph will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Data Privacy Act of 2012.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by istarph:
Request a copy of the personal data istarph holds about you, along with information about how it is being processed.
Request correction of inaccurate or incomplete personal data held in your istarph account.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Lodge a complaint with the National Privacy Commission (NPC) if you believe istarph has processed your data in violation of the Data Privacy Act of 2012.
To exercise any of the above rights, please contact istarph's Data Protection Officer using the contact details in Section 15. istarph will respond to all verified data subject requests within 15 business days of receipt. We may need to verify your identity before processing your request to ensure the security of your personal data.
Please note: Certain rights are subject to limitations. For example, istarph may be unable to delete data that it is legally required to retain under AML regulations or other applicable Philippine law. Where a limitation applies, istarph will explain the reason in its response to your request.
21+ Only: The istarph Platform is strictly intended for individuals who are 21 years of age or older. istarph does not knowingly collect personal data from individuals under the age of 21. If istarph becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, all associated funds will be reviewed in accordance with applicable regulations, and the personal data will be deleted as soon as practicable.
If you are a parent or guardian and believe that a minor has registered an istarph account using your details or their own, please contact istarph support immediately at the email address provided in Section 15. istarph takes underage gambling extremely seriously and will act promptly on all such reports.
The istarph Platform may contain links to third-party websites or services for informational purposes. istarph is not responsible for the privacy practices or content of any third-party websites. This Privacy Policy applies solely to data collected through the istarph Platform. We encourage you to review the privacy policies of any third-party sites you visit.
istarph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
Where changes are material, istarph will notify registered users via email or in-platform notification at least 14 days before the revised Policy takes effect. Your continued use of the istarph Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure by contacting istarph support.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by istarph, please contact our Data Protection Officer:
Data Protection Officer — istarph
Email: privacy@istarph.net
General Support: support@istarph.net
Please include your full name, registered account username, and a clear description of your request or concern. istarph aims to acknowledge all privacy-related enquiries within 3 business days and to provide a substantive response within 15 business days.
Every istarph player deserves to know their data is handled with discipline and care. Here is what we do to keep your information safe.
Every connection to istarph is secured with TLS encryption. Your login credentials, payment details, and personal data are protected in transit at all times — no exceptions.
istarph has appointed a dedicated DPO to oversee compliance with the Data Privacy Act of 2012. Your data rights requests are handled by a qualified professional, not an automated system.
istarph will never sell your personal data to advertisers, data brokers, or any third party. Your information is used solely to operate the Platform and meet our legal obligations.
istarph's data practices are fully aligned with Republic Act No. 10173 (Data Privacy Act of 2012) and the issuances of the National Privacy Commission. Filipino players are protected under Philippine law.
Access, correct, download, or request deletion of your personal data at any time. istarph responds to all verified data subject requests within 15 business days — your rights are real and enforceable.
istarph collects only the data that is strictly necessary to operate a safe and compliant gaming platform. We do not collect data speculatively or beyond what is needed for the purposes described in this Policy.
Now that you know how istarph handles your data, you can play with full confidence. Register your free account and enjoy hundreds of casino games built for Filipino players. Must be 21 or older.
21+ only. Gambling is addictive. Know when to stop. Play responsibly.