Privacy Policy

ambergame takes the privacy of its players seriously. As a platform serving Filipino players under PAGCOR regulatory oversight, we are bound by the requirements of Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).

This Privacy Policy is written in plain English to ensure that every Filipino player — whether based in Manila, Cebu, Davao, Iloilo, or elsewhere in the archipelago — can clearly understand how ambergame handles personal information. We have deliberately avoided impenetrable legal language where clarity is equally achievable.

The collection and processing of personal data at ambergame is not arbitrary. Every piece of information we request serves a specific, documented purpose: verifying your identity, processing your transactions, complying with anti-money laundering obligations, improving the platform experience, and protecting both you and ambergame from fraud. We do not collect data we don't need. We do not sell your personal information to advertisers.

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal information is ambergame, operating the online gaming platform at ambergame.one under PAGCOR regulatory authorization.

As data controller, ambergame determines the purposes and means of processing your personal data. ambergame has appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance and serving as the primary point of contact for player data requests. Contact details for the DPO are provided in Section 16 of this Policy.

The following categories of personal data are collected by ambergame in the course of operating the platform and providing services to registered Players:

ambergame does not collect biometric data (fingerprints, facial recognition data) except where expressly consented to for enhanced security verification and only where permitted under Philippine law. We do not collect sensitive personal information relating to health, political affiliations, or religious beliefs.

ambergame collects personal data through the following channels:

Information you provide directly to ambergame when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to any ambergame survey or promotion. This is the primary source of personal data for ambergame registered Players.

Technical data is collected automatically whenever you access the ambergame platform, including your IP address, device identifiers, browser characteristics, and session activity. This data is generated by standard server-side logging systems and browser-based analytics tools and is collected without requiring any active input from you.

When you make a deposit or withdrawal via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven CLiQQ, or USDT TRC20, the relevant payment processor provides ambergame with transaction confirmation data sufficient to credit your account or complete your withdrawal. ambergame does not receive your full GCash or bank account credentials — only the minimum transaction confirmation data necessary to process the payment.

During KYC verification, ambergame may use third-party identity verification technology to assist in validating the authenticity of Philippine government-issued identification documents. Such third parties operate under data processing agreements with ambergame and are not permitted to use your data for any independent purpose.

ambergame processes your personal data only where a valid legal basis under the Data Privacy Act of 2012 exists. The following table sets out the purposes for which we process personal data and the corresponding legal basis:

• Account creation and management — necessary for the performance of the contract between you and ambergame;
• Processing deposits and withdrawals — necessary for the performance of the contract and compliance with financial regulations;
• KYC identity and age verification — necessary for compliance with PAGCOR regulations and the Anti-Money Laundering Act (AMLA) of the Philippines;
• Prevention of fraud, money laundering, and prohibited activities — legitimate interests of ambergame and compliance with Applicable Law;
• Responsible gaming monitoring and intervention — legitimate interests of ambergame and compliance with PAGCOR responsible gaming requirements;
• Customer support and dispute resolution — necessary for the performance of the contract and legitimate interests of ambergame;
• Platform security and abuse prevention — legitimate interests of ambergame;
• Platform improvement and analytics — legitimate interests of ambergame, where anonymised or aggregated data is used;
• Marketing and promotional communications — your consent, provided at registration or subsequently via account preferences, which may be withdrawn at any time.

ambergame does not sell, rent, or trade your personal data to third parties for their independent commercial purposes. Personal data is shared with third parties only in the following circumstances:

ambergame engages third-party service providers who process personal data on ambergame's behalf under binding data processing agreements. These include: payment processing providers (GCash, Maya, banks), identity verification technology providers, cloud hosting infrastructure providers, customer support platform providers, and anti-fraud technology providers. All such providers are contractually prohibited from using your data for any purpose beyond providing services to ambergame.

Licensed game studios (including PG Soft, Pragmatic Play, Jili, JDB Gaming, and Evolution) receive session data necessary to operate the games you play. This typically includes your ambergame player identifier, session token, currency, and bet/win records. Game providers do not receive your name, mobile number, payment details, or KYC documents.

ambergame is legally required to share information with PAGCOR, the Anti-Money Laundering Council (AMLC) of the Philippines, and other competent Philippine authorities upon lawful request or as required by statute. Such disclosures may occur without prior notice to you where required by law. ambergame cooperates fully with all lawful regulatory inquiries.

In the event of a merger, acquisition, or sale of ambergame's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same data protection commitments set out in this Policy. You will be notified of any such transfer via the contact details on your ambergame account.

ambergame uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impacting your ability to use ambergame.
• Functional Cookies: Remember your preferences such as language settings, saved login state on trusted devices, and display preferences. Disabling these may reduce platform convenience.
• Analytics Cookies: Collect anonymised data about how Players use the ambergame platform — which pages are visited, how long sessions last, and where errors occur. This data helps ambergame improve the user experience. No individual player is identified in analytics reports.
• Security & Fraud Prevention Cookies: Used to detect unusual account behaviour, identify potentially fraudulent sessions, and protect the integrity of the platform.

ambergame does not use third-party advertising or behavioral targeting cookies. Your gaming habits and player profile are not shared with advertising networks.

ambergame retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data — retained for the duration of the account relationship plus a minimum of 5 years following account closure, as required by Philippine anti-money laundering regulations;
• KYC documents and identity records — retained for a minimum of 5 years from the date of the last transaction on the account, in accordance with PAGCOR and AMLC requirements;
• Financial transaction records — retained for 7 years from the transaction date, as required under Philippine financial regulations;
• Customer support communications — retained for 3 years from the date of the last support interaction;
• Technical and server logs — retained for 12 months from the date of generation, unless a longer period is required for an active security investigation or legal matter;
• Marketing consent records — retained for the duration of the consent plus 3 years to evidence compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where data is anonymised and can no longer be attributed to an identifiable individual, the anonymised dataset may be retained indefinitely for statistical purposes.

ambergame implements a multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ambergame servers — the same standard used by Philippine commercial banks;
• Encryption at rest for all stored personal data, including KYC documents and financial records, using AES-256 encryption;
• Password hashing — your account password is never stored in plaintext; it is hashed using a modern cryptographic algorithm with per-user salting;
• Access controls — internal access to personal data is restricted on a strict need-to-know basis with role-based access management, multi-factor authentication for system access, and comprehensive access audit logging;
• Regular security assessments — including penetration testing and vulnerability scanning conducted by independent cybersecurity specialists;
• Incident response procedures — ambergame maintains documented procedures for detecting, responding to, and reporting data security incidents consistent with NPC notification requirements.

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ambergame. You may exercise these rights by contacting ambergame's Data Protection Officer using the details in Section 16.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an ambergame account, please contact our Data Protection Officer immediately using the details in Section 16. ambergame will investigate and take appropriate action within 72 hours of receiving such a report.

Some of the third-party service providers used by ambergame — including cloud infrastructure providers and game studios — may process personal data in jurisdictions outside the Philippines. Where such cross-border transfers occur, ambergame ensures that:

• The recipient country has been assessed as providing an adequate level of data protection, or
• Appropriate contractual safeguards (data processing agreements with standard contractual clauses) are in place to protect your data, consistent with the requirements of the Data Privacy Act and NPC guidelines on cross-border data transfers.

A list of the jurisdictions to which data may be transferred and the safeguards in place is available upon request from ambergame's Data Protection Officer.

ambergame sends promotional communications — including welcome bonus notifications, reload offers, cashback alerts, and VIP programme updates — to Players who have consented to receive such communications. Consent is obtained at registration and may be updated at any time through your account notification settings.

ambergame sends marketing communications via SMS to your registered Philippine mobile number. We do not send unsolicited marketing emails to addresses not associated with an ambergame account registration.

To stop receiving promotional SMS messages from ambergame, you may:

• Update your notification preferences in your ambergame account settings;
• Reply STOP to any ambergame SMS, which will automatically opt your number out of marketing messages; or
• Contact ambergame support directly to request removal from the marketing list.

Opting out of marketing communications does not affect ambergame's ability to send you transactional messages related to your account — such as OTP codes, deposit confirmations, withdrawal notifications, or security alerts. These are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

As a PAGCOR-regulated online gaming operator, ambergame is subject to specific data collection, retention, and reporting obligations under Philippine law. These obligations exist independently of this Privacy Policy and take precedence over any conflicting provision herein:

• PAGCOR Reporting: ambergame may be required to submit player account data, transaction records, and gaming activity reports to PAGCOR as a condition of its operating authorization. Players consent to such disclosures by registering an account.
• AMLC Reporting: Transactions meeting or exceeding threshold amounts defined under the Anti-Money Laundering Act (as amended) are reported to the Anti-Money Laundering Council. Suspicious transactions may be reported regardless of amount.
• Law Enforcement: ambergame will disclose personal data to Philippine law enforcement agencies in response to a valid court order, subpoena, or other lawful legal process. ambergame will not voluntarily disclose personal data to law enforcement beyond its legal obligations.
• National Privacy Commission: ambergame cooperates fully with the National Privacy Commission in the exercise of its regulatory functions, including investigations, audits, and enforcement actions.

ambergame reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. Revised versions will be published on this page with an updated effective date. Where changes are material — meaning they significantly affect your rights or how your data is used — ambergame will provide advance notice via SMS to registered Players at least 14 days before the changes take effect.

Your continued use of the ambergame platform after the revised Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with material changes to this Policy, you may close your account and request any outstanding balance be paid to your registered withdrawal method.

For all matters relating to this Privacy Policy, including requests to exercise your data rights, questions about how ambergame processes your personal data, or to report a potential data breach, please contact ambergame's Data Protection Officer:

If you are not satisfied with ambergame's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.

Document Reference: ambergame Privacy Policy — Effective 1 January 2026. This document supersedes all previous versions of the ambergame Privacy Policy. © 2026 ambergame. All rights reserved.