Privacy Policy

1Introduction & Scope

This Privacy Policy ("Policy") applies to all personal data collected and processed by ambergame ("ambergame," "we," "our," or "us") in connection with the operation of the online gaming platform accessible at ambergame.co (the "Platform"), including all related services, customer support interactions, marketing communications, and payment processing activities.

ambergame is committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered Players, visitors to our website, and individuals who contact our customer support team. This Policy explains what data we collect, why we collect it, how we use it, who we share it with, and what rights you have in relation to your data.

This Policy is governed by and construed in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines, its implementing rules and regulations, and applicable directives issued by the National Privacy Commission (NPC). Where ambergame processes data of individuals located in other jurisdictions, we comply with applicable local data protection laws to the extent required.

This Policy should be read alongside the ambergame Terms & Conditions and Responsible Gaming Policy.

2Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, ambergame acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the Platform.

Data Controller: ambergame
Platform: ambergame.co
Contact: [email protected]
Jurisdiction: Republic of the Philippines

Where ambergame engages third-party service providers to process personal data on its behalf — for example, payment processors, fraud detection services, or game analytics providers — such third parties act as Personal Information Processors (PIPs) and are bound by contractual data processing obligations consistent with the Data Privacy Act and this Policy.

3Categories of Personal Data We Collect

ambergame collects the following categories of personal data, depending on your interaction with the Platform:

Identity & Contact Data

Full legal name Date of birth Gender Philippine mobile number Email address Residential address Government-issued ID details

Account & Gaming Data

Username and password (hashed) Account registration date Game session history Wager amounts and outcomes Bonus usage history Responsible gaming settings

Financial & Transaction Data

GCash account reference Maya / PayMaya reference Bank account details (for KYC) Deposit and withdrawal history Transaction reference numbers

Technical & Device Data

IP address Device type and OS Browser type and version Login timestamps Geolocation (general) Session duration

Communications Data

Customer support correspondence Live chat transcripts Survey responses Email and SMS interaction records

ambergame does not collect sensitive personal information (as defined by the Data Privacy Act) such as racial or ethnic origin, political opinions, religious beliefs, health information, or sexual orientation, except where required for regulatory compliance — for example, health information in the context of a confirmed self-exclusion request made for medical or psychological reasons.

4How We Collect Your Data

ambergame collects personal data through the following means:

Registration: When you create an ambergame account, you directly provide identity, contact, and account data;
KYC Verification: When you submit documents in response to a Know Your Customer request, including government-issued IDs and payment method proof;
Deposits and Withdrawals: Financial data is collected when you initiate transactions through GCash, Maya, BPI, BDO, Metrobank, or other accepted Philippine payment channels;
Platform Use: Technical and gaming data is collected automatically as you navigate and interact with the Platform, including through cookies and server logs;
Customer Support: Communications data is collected when you contact ambergame through live chat, email, or other support channels;
Third-Party Authentication: Where you link a GCash or Maya account for quick login purposes, we receive a limited reference token from the payment provider — we do not receive your full payment credentials.

5How We Use Your Personal Data

ambergame uses the personal data it collects for the following purposes:

Account Creation and Management: To establish and maintain your ambergame account, verify your identity and age (21+ requirement), and manage your account settings and preferences;
Service Delivery: To provide access to games, process deposits and withdrawals, apply bonuses and promotions, and deliver all other services available on the Platform;
Age and Identity Verification: To comply with the mandatory 21+ age restriction under PAGCOR regulations, and to verify that account holders are who they claim to be;
Regulatory Compliance: To fulfill ambergame's legal obligations under Philippine gaming regulations, the Data Privacy Act of 2012, and Anti-Money Laundering Act (AMLA) requirements — including transaction monitoring and mandatory reporting to relevant authorities;
Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account abuse, unauthorized access, and other security threats;
Responsible Gaming: To monitor gaming patterns, enforce player-set limits, manage self-exclusion requests, and administer responsible gaming interventions where required;
Customer Support: To respond to your inquiries, resolve complaints, and maintain records of our communications;
Marketing and Promotions: Where you have provided consent, to send promotional communications about ambergame offers, new games, and platform updates. You may withdraw marketing consent at any time through your account settings;
Platform Improvement: To analyze usage patterns, improve Platform functionality, optimize game performance, and develop new features;
Legal Proceedings: To establish, exercise, or defend legal claims in connection with ambergame's operations.

6Legal Basis for Processing

Under the Data Privacy Act of 2012, ambergame processes personal data on the following legal bases:

Contractual Necessity: Processing necessary to perform ambergame's obligations under the Terms & Conditions — including account management, game access, and payment processing;
Legal Obligation: Processing required to comply with Philippine law, including PAGCOR regulations, AMLA requirements, and NPC directives;
Legitimate Interests: Processing conducted for ambergame's legitimate interests — including fraud prevention, platform security, and responsible gaming monitoring — where such interests are not overridden by your data privacy rights;
Consent: Processing for which you have provided specific, informed, and freely given consent — principally, marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

7Data Sharing & Third-Party Disclosure

ambergame does not sell your personal data. We may share personal data with the following categories of recipients only to the extent necessary for the stated purpose:

Game Providers: Providers such as Evolution Gaming, Pragmatic Play, PG Soft, and Jili Games receive limited technical and session data necessary to deliver game content to your device. Game Providers are contractually prohibited from using this data for any purpose other than game delivery;
Payment Processors: GCash (G-Xchange, Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers receive the financial and identity data necessary to process deposits and withdrawals;
KYC and Fraud Verification Services: Identity verification and fraud detection partners may receive identity documents and transaction data strictly for verification purposes;
Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies may receive data as required by law or in response to lawful orders;
Technology Service Providers: Cloud hosting, cybersecurity, analytics, and customer support technology vendors who process data on ambergame's behalf under strict contractual data processing agreements;
Legal and Professional Advisors: Lawyers, auditors, and compliance consultants who require access to data in connection with their engagement to advise ambergame, subject to professional confidentiality obligations.

Cross-Border Transfers: Where personal data is transferred outside the Philippines — for example, to cloud infrastructure providers or game studios headquartered abroad — ambergame ensures appropriate safeguards are in place, including contractual data transfer agreements consistent with NPC requirements.

8Data Retention

ambergame retains personal data for as long as is necessary to fulfill the purposes described in this Policy, comply with legal obligations, and resolve disputes or enforce agreements. The following general retention periods apply:

Active Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to meet AMLA and PAGCOR record-keeping requirements;
Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with Philippine financial record-keeping obligations;
KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later;
Customer Support Records: Retained for two (2) years from the date of the last interaction, unless retention is required for active disputes or legal proceedings;
Marketing Consent Records: Retained for the duration of your account and for one (1) year following consent withdrawal, to demonstrate compliance with consent obligations;
Technical and Log Data: Retained for ninety (90) days to one (1) year, depending on data type and operational necessity.

Upon expiration of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents reconstruction of the original data subject's identity.

9Your Data Privacy Rights

Under the Data Privacy Act of 2012 and applicable NPC regulations, you have the following rights in relation to your personal data held by ambergame:

Right	What It Means	How to Exercise
Right to be Informed	The right to know what data ambergame holds about you, the purposes of processing, and your rights under the law.	This Privacy Policy fulfills this obligation. Contact us for specific queries.
Right to Access	The right to request a copy of the personal data ambergame holds about you.	Submit a written data access request to [email protected].
Right to Rectification	The right to request correction of inaccurate or incomplete personal data.	Update your Account settings or contact customer support.
Right to Erasure	The right to request deletion of your personal data where processing is no longer justified and no legal retention obligation applies.	Submit a written deletion request. Note: retention obligations may prevent full erasure.
Right to Object	The right to object to processing based on legitimate interests, including direct marketing.	Opt out via account settings or notify customer support in writing.
Right to Data Portability	The right to receive your data in a structured, machine-readable format for transfer to another service.	Submit a portability request to [email protected].
Right to File a Complaint	The right to lodge a complaint with the National Privacy Commission if you believe your rights have been violated.	Contact the NPC directly via their official channels.

ambergame will acknowledge data rights requests within three (3) business days and aims to fulfill them within fifteen (15) business days, subject to identity verification and the complexity of the request.

10Cookies & Tracking Technologies

The ambergame Platform uses cookies and similar tracking technologies to operate effectively and improve your experience. The following categories of cookies may be used:

Strictly Necessary Cookies: Essential for the Platform to function — including session management, login authentication, and security. These cannot be disabled without impairing Platform functionality;
Functional Cookies: Remember your preferences, language settings, and gameplay configurations to provide a more personalized experience;
Analytics Cookies: Collect aggregated, anonymized data about how users interact with the Platform — for example, which pages are visited most and how long sessions last. This data is used exclusively to improve Platform performance;
Security Cookies: Support fraud detection and bot prevention systems by identifying unusual access patterns.

Cookie Management: You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may affect Platform functionality including your ability to log in and maintain session continuity. ambergame does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

11Security Measures

ambergame implements technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:

256-bit SSL/TLS encryption for all data transmitted between your device and ambergame servers;
Encryption of passwords using industry-standard one-way hashing algorithms (bcrypt); passwords are never stored in plain text;
Encryption of sensitive stored data including payment method references and government ID details;
Two-factor authentication (2FA) available for all accounts;
Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
Regular security audits, vulnerability assessments, and penetration testing by independent cybersecurity specialists;
Real-time intrusion detection and automated threat response systems;
Secure data centers with physical access controls, redundancy, and disaster recovery capabilities.

Data Breach Notification: In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, ambergame will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the Data Privacy Act of 2012.

12Minors & Age Restrictions

The ambergame Platform is strictly for individuals who are at least 21 years of age, in compliance with PAGCOR's minimum age requirements for online gaming in the Philippines. ambergame does not knowingly collect personal data from individuals under the age of 21.

If ambergame becomes aware that personal data has been submitted by, or on behalf of, a person under the age of 21, that data will be deleted promptly, all associated transactions will be voided, and the matter will be reported to PAGCOR in accordance with regulatory requirements.

If you believe that ambergame has inadvertently collected data from a minor, please notify us immediately at [email protected] so that we can take appropriate action without delay.

13Third-Party Links

The ambergame Platform may contain references to Game Providers and payment method interfaces operated by third parties. ambergame is not responsible for the privacy practices of any third-party platform or service that you access in connection with game delivery or payment processing.

When you interact with a third-party payment interface — for example, the GCash or Maya payment window — you are subject to that provider's privacy policy in respect of data entered into their interface. ambergame recommends reviewing the privacy policies of any third-party services you use in connection with the Platform.

14Updates to This Privacy Policy

ambergame reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, regulatory requirements, or Platform functionality. When material changes are made, ambergame will notify registered users by posting a prominent notice on the Platform and, where practicable, by sending a notification to registered email addresses.

The updated Policy will specify its effective date. Your continued use of the ambergame Platform after the effective date of an updated Policy constitutes your acknowledgment of the changes and your continued consent to data processing as described in the updated Policy.

ambergame recommends reviewing this Policy whenever you receive an update notification, or at least once every six (6) months. This Policy was last reviewed on 1 January 2026.

15Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data privacy rights, or have a concern about how ambergame processes your personal data, please contact us:

ambergame Data Protection Team
Email: [email protected]
Platform: ambergame.co
Response time: within two (2) business days
Languages: English and Filipino

If you are not satisfied with ambergame's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about filing a complaint with the NPC is available through the NPC's official government channels.

This Privacy Policy was last updated and is effective as of 1 January 2026. It supersedes all previous versions of the ambergame Privacy Policy.

Minimal Data Collection

256-Bit SSL Encryption

Your Rights Under the NPC

No Data Selling

Transparent Cookie Use

Direct Privacy Contact