1. Introduction
Welcome to XO Play's Privacy Policy. XO Play ("we," "our," or "us") operates the online gaming platform accessible at xoplay.best, offering Filipino players a wide selection of games including slots, bingo, PBA betting, MMA betting, fishing games, Pusoy, and virtual sports. We take your privacy seriously, and this Privacy Policy explains clearly how we collect, use, store, and protect your personal information when you use our platform.
By registering for an account or continuing to use xoplay.best, you confirm that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, please stop using the platform and contact us to request account closure.
This policy is written in compliance with applicable Philippine data privacy laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations under the National Privacy Commission (NPC).
2. Information We Collect
When you interact with XO Play, we may collect the following categories of personal information:
- Account Registration Data: Full name, date of birth, email address, mobile number, and username when you sign up for an XO Play account.
- Identity Verification Data: Government-issued ID copies (e.g., PhilSys ID, passport, driver's license) and selfies required for KYC (Know Your Customer) compliance — a standard requirement for licensed online gaming platforms in the Philippines.
- Financial Information: Payment method details such as your GCash or Maya-linked mobile number, BDO/BPI/UnionBank account details, or card information (processed securely through encrypted gateways — we do not store raw card numbers).
- Transaction History: Records of deposits, withdrawals, bets placed, games played, and bonus usage within XO Play.
- Device & Technical Data: IP address, browser type, device model, operating system, session timestamps, and cookie identifiers collected automatically when you access our platform.
- Communications Data: Messages, support tickets, and feedback you send to our customer support team.
3. How We Use Your Information
XO Play uses the personal information we collect for the following purposes:
- To create and manage your XO Play account
- To verify your identity and age (you must be at least 21 years old to play, in compliance with PAGCOR regulations)
- To process deposits and withdrawals through GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet, BDO, BPI, UnionBank, Visa, or Mastercard
- To personalize your gaming experience and recommend relevant games or promotions
- To send important account notifications, transaction confirmations, and security alerts
- To prevent fraud, money laundering, and other illegal activities on our platform
- To comply with our legal obligations under Philippine law and gaming regulations
- To improve our platform performance, fix bugs, and enhance overall user experience
- To send you promotional offers and bonuses — only if you have opted in to receive marketing communications
4. Legal Basis for Processing
Under the Data Privacy Act of 2012, XO Play processes your personal data based on the following legal grounds:
- Contractual Necessity: Processing needed to create your account and deliver the gaming services you signed up for.
- Legal Obligation: Processing required to comply with PAGCOR licensing rules, anti-money laundering laws (AMLA), and NPC regulations.
- Legitimate Interest: Processing for fraud prevention, platform security, and improving our services.
- Consent: Processing for marketing communications and optional personalization features, where you have given explicit consent.
5. How We Share Your Information
XO Play respects your privacy and will not sell, rent, or trade your personal data to third parties for commercial gain. However, we may share your information in the following limited circumstances:
- Service Providers: Trusted third-party vendors who assist us in operating our platform — including payment processors, KYC verification providers, cloud hosting services, and customer support tools. These parties are contractually bound to handle your data securely and only for the purposes we specify.
- Regulatory Authorities: Government agencies such as PAGCOR, the Anti-Money Laundering Council (AMLC), or the National Privacy Commission when we are legally required to disclose information.
- Law Enforcement: When required by valid court order, subpoena, or lawful request from Philippine law enforcement authorities.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections.
We require all third parties we work with to uphold strong data security standards and treat your personal information with the same level of care as XO Play does.
6. Cookies and Tracking Technologies
XO Play uses cookies and similar tracking technologies to enhance your browsing experience and understand how players navigate our platform. Here's what we use:
- Essential Cookies: Required for the platform to function properly. These include session cookies that keep you logged in.
- Analytics Cookies: Help us understand page performance, popular game sections, and traffic patterns so we can make XO Play better for everyone.
- Preference Cookies: Remember your settings and language preferences so you don't have to re-enter them each visit.
You can control cookie settings through your browser. Note that disabling essential cookies may affect your ability to log in or use certain features of XO Play.
7. Data Retention
We keep your personal data for as long as your XO Play account is active or as needed to provide you with our services. When you close your account, we will delete or anonymize your data within a reasonable period, unless we are required by law to retain certain records longer.
Under Philippine anti-money laundering regulations, financial transaction records must be kept for at least five (5) years from the date of the transaction. We comply with this requirement.
8. Your Privacy Rights
Under the Data Privacy Act of 2012, you have the following rights regarding your personal information held by XO Play:
- Right to Be Informed: Know what personal data we collect and how we use it — which is exactly what this Privacy Policy covers.
- Right to Access: Request a copy of the personal information we hold about you.
- Right to Rectification: Correct any inaccurate or incomplete information in your account.
- Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
- Right to Object: Opt out of certain types of data processing, particularly direct marketing communications.
- Right to Data Portability: Receive your personal data in a structured, machine-readable format.
- Right to File a Complaint: Lodge a complaint with the National Privacy Commission if you believe your rights have been violated.
To exercise any of these rights, please contact our Privacy Officer at support@xoplay.best. We will respond to your request within 15 working days.
9. Data Security
XO Play implements appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security practices include:
- TLS/SSL encryption for all data in transit between your device and our servers
- Encrypted storage for sensitive data including payment information
- Two-factor authentication (2FA) options for your XO Play account
- Regular security audits and vulnerability assessments
- Strict access controls — only authorized XO Play personnel can access your personal data on a need-to-know basis
- Incident response procedures to quickly address any potential data breaches
While we do everything we can to protect your data, no online platform can guarantee 100% security. We encourage you to use a strong, unique password for your XO Play account and enable 2FA for extra protection.
10. Children's Privacy
XO Play is strictly for adults aged 21 and above. We do not knowingly collect personal information from anyone under 21 years old. If we discover that we have inadvertently collected data from a minor, we will immediately delete that account and all associated information. If you believe a minor has registered on our platform, please contact us right away at support@xoplay.best.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make significant changes, we will notify you via email or through a prominent notice on xoplay.best before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.
Continuing to use XO Play after the updated policy takes effect means you accept the revised terms. We recommend reviewing this page periodically to stay informed.
12. Contact Us
If you have any questions, concerns, or requests related to your privacy and personal data at XO Play, don't hesitate to reach out to us. We're here to help, kabayan.
- Email: support@xoplay.best
- Website: xoplay.best
- Response Time: Within 48 hours for general inquiries; 15 working days for formal data privacy requests