Privacy Policy – Instaplay Online Casino Philippines

1 Introduction

This Privacy Policy explains how Instaplay ("we," "us," or "our") collects, uses, stores, and protects the personal information you provide when you use the Instaplay website at https://instaplay.click and all associated services, including online casino games, sports betting, live dealer tables, and customer support.

Instaplay is committed to handling your personal data responsibly and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations (IRR). This policy is written with Filipino players in mind — people who deserve a clear and honest explanation of what happens to their information, not dense legal jargon that's designed to confuse.

By creating an Instaplay account, using our platform, or contacting our support team, you acknowledge that you have read this Privacy Policy and agree to the collection and use of your personal data as described here. If you do not agree, please refrain from using the platform.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for your personal information is:

Our designated Data Protection Officer (DPO) is responsible for overseeing compliance with this policy and applicable data protection laws. If you have any questions or concerns about how Instaplay handles your personal data, the DPO is your first point of contact.

3 Data We Collect

Instaplay collects personal data that is necessary for us to operate the platform safely and in compliance with our licensing obligations. Here is a breakdown of what we collect and why:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data unless specifically required by a regulatory authority and with your explicit consent.

4 How We Collect Your Data

Instaplay collects your personal data through several channels:

4.1 Directly From You

Most of the data we hold about you is provided directly by you — when you complete our registration form, submit identity verification documents, make a deposit, request a withdrawal, set responsible gaming limits, or contact our support team.

4.2 Automatically Through Platform Use

When you use the Instaplay platform, our systems automatically collect technical data including your IP address, device identifiers, browser type, session timestamps, and pages visited. This data is collected through server logs, cookies, and similar tracking technologies — explained further in Section 10.

4.3 From Third Parties

In limited circumstances, Instaplay receives personal data from trusted third parties, including:

• Payment processors (GCash, Maya, banks) who confirm transaction status and wallet ownership.
• Identity verification service providers who help us confirm that documents are genuine.
• Fraud prevention and anti-money laundering screening services required under Philippine gaming regulations.

5 Why We Use Your Data

Instaplay uses your personal data only for legitimate, specific purposes. We do not process your data for purposes unrelated to operating our platform or complying with the law. The primary reasons we use your information are:

• Account creation and management: Setting up your Instaplay account, verifying your identity and age, and maintaining your account records.
• Processing transactions: Handling deposits via GCash, Maya, and other Philippine payment methods, as well as processing withdrawal requests and maintaining accurate transaction histories.
• Platform operation and personalisation: Delivering the services you use — casino games, PBA betting, esports markets — and providing a personalised experience based on your preferences and history.
• Regulatory compliance and anti-money laundering: Meeting our obligations under Philippine gaming law, including Know Your Customer (KYC) checks, suspicious transaction reporting, and record-keeping requirements.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, and other security threats to protect both you and the platform.
• Responsible gaming monitoring: Monitoring gaming patterns to identify players who may be at risk and ensuring our responsible gaming tools function effectively.
• Customer support: Resolving account queries, payment issues, and disputes fairly and efficiently.
• Marketing communications (with consent): Sending you promotional offers, game updates, and relevant news about Instaplay — but only if you have opted in. You can withdraw consent at any time through your account settings or by contacting support.

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, every instance of personal data processing must have a lawful basis. At Instaplay, we rely on the following legal grounds:

• Contractual necessity: Most data processing is required to fulfil our agreement with you — the Terms and Conditions you accepted when you registered. Without processing your identity, payment, and gaming data, we simply cannot operate your account.
• Legal obligation: Certain processing — particularly KYC verification, transaction monitoring, and record-keeping — is required by Philippine gaming regulations and the Anti-Money Laundering Act (AMLA). We cannot waive these obligations.
• Legitimate interests: We process technical and security data based on our legitimate interest in protecting the platform, detecting fraud, and ensuring the safety of all players. We apply a proportionality test to ensure this processing does not override your rights.
• Consent: For marketing communications and the use of non-essential cookies, we rely on your freely given, specific, and informed consent — which you can withdraw at any time.

7 Data Sharing & Third Parties

Instaplay does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We only share data where it is necessary to operate the platform or comply with legal requirements. Recipients of your data include:

7.1 Service Providers (Data Processors)

We engage trusted third-party processors who act on our instructions and are bound by data processing agreements. These include payment processors (GCash, Maya, bank partners), identity verification providers, cloud infrastructure providers, and customer support software vendors.

7.2 Regulatory Authorities

Instaplay is required by law to share certain data with Philippine regulatory bodies, including gaming authorities and the Anti-Money Laundering Council (AMLC), when legally mandated. We will always inform you of such disclosures unless we are legally prohibited from doing so.

7.3 Law Enforcement

We may disclose your data to law enforcement agencies when required by a valid court order, search warrant, or other lawful process. We review all such requests carefully and will only comply where legally obligated.

7.4 Game Providers

Our licensed game providers may receive limited technical data (such as session tokens and game round IDs) to operate games and resolve technical disputes. These providers are independently licensed and are bound by their own data protection obligations.

8 Data Retention

Instaplay retains your personal data for as long as your account is active and for as long as required by Philippine law and our regulatory obligations. Specific retention periods are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years after account closure, as required by Philippine anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of each session.
• Customer support communications: Retained for two (2) years from the date of the final communication in each ticket or conversation thread.
• Marketing consent records: Retained for three (3) years from the date consent was given or withdrawn.

Once the applicable retention period expires and there is no longer a legal basis to retain your data, Instaplay will securely delete or anonymise it. Where anonymisation is used, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical analysis.

9 Data Security

Protecting your personal data is a core responsibility at Instaplay. We implement a range of technical and organisational security measures proportionate to the sensitivity of the data we hold:

• Encryption: All data transmitted between your device and Instaplay is encrypted using TLS (Transport Layer Security). Sensitive data at rest — including passwords and financial information — is encrypted using industry-standard algorithms.
• Access controls: Personal data is accessible only to Instaplay staff who require it to perform their specific job functions. All staff with data access are trained on data protection obligations and subject to confidentiality agreements.
• Two-factor authentication: Instaplay supports and encourages the use of two-factor authentication (2FA) on all player accounts to prevent unauthorised access.
• Regular security audits: Our platform undergoes regular internal and independent security assessments to identify and remediate vulnerabilities.
• Data breach response: Instaplay maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights, we will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act.

While we take every reasonable precaution, no online platform can guarantee absolute security. You also have a role to play — use a strong, unique password for your Instaplay account, never share your login credentials, and notify us immediately if you suspect unauthorised access.

10 Cookies & Tracking Technologies

Instaplay uses cookies and similar tracking technologies to operate and improve the platform. Here's what we use and why:

10.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function — session management, login state, security tokens. These cannot be disabled without breaking core functionality.
• Analytics cookies: Help us understand how players use the platform — which pages are visited most, where errors occur, and how we can improve the experience. Data is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming configurations.
• Marketing cookies (with consent only): Used to deliver relevant promotions. These are only placed if you have explicitly opted in and can be disabled at any time through your browser settings or our cookie management tool.

10.2 Managing Cookies

You can manage, restrict, or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from using core Instaplay features such as logging in. Disabling analytics or marketing cookies will not affect your ability to play or bet.

11 Your Data Rights

As a data subject under the Philippine Data Privacy Act, you have specific rights regarding your personal information held by Instaplay. We take these rights seriously and have processes in place to honour them promptly.

To exercise any of these rights, contact our Data Protection Officer at privacy@instaplay.click. We will respond within fifteen (15) working days of receiving a valid request. We may need to verify your identity before processing certain requests to ensure we are disclosing data to the right person.

12 Protection of Minors

Instaplay's services are strictly for adults aged 21 and above. We do not knowingly collect personal data from anyone under this age. Our registration process includes age verification checks, and we may request additional age confirmation documentation at any time.

If we become aware that we have inadvertently collected personal data from a minor, we will immediately delete that data, close the associated account, and refund any deposits in full. If you are a parent or guardian and believe your child has registered on Instaplay, please contact us immediately at privacy@instaplay.click.

13 Cross-Border Data Transfers

Some of the third-party service providers used by Instaplay — particularly cloud infrastructure and game platform vendors — may process data in servers located outside the Philippines. Where such transfers occur, Instaplay ensures that:

• The receiving country or organisation provides a level of data protection at least equivalent to that required by the Philippine Data Privacy Act.
• Appropriate contractual safeguards (such as data processing agreements) are in place with all international processors.
• The transfer is limited to the minimum data necessary for the specific processing purpose.

You may request information about the specific countries to which your data may be transferred by contacting our Data Protection Officer.

14 Changes to This Privacy Policy

Instaplay reviews this Privacy Policy regularly and may update it to reflect changes in our practices, the law, or our operating environment. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to your registered email address describing the key changes.
• Display a prominent notice on the Instaplay platform for a reasonable period before the changes take effect.

Your continued use of Instaplay after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you may close your account as described in the Terms and Conditions.

15 Contact & Complaints

If you have questions about this Privacy Policy, want to exercise your data rights, or have a concern about how Instaplay has handled your personal information, please get in touch:

If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC). The NPC is the Philippine government body responsible for enforcing the Data Privacy Act and can be reached through official government channels.