AportPlus Privacy Policy — Your Data, Your Rights, Our Commitment

AportPlus is the operator of the online casino, sportsbook, live dealer games, bingo, and related gaming services available at aportplus.com. In this Privacy Policy, "AportPlus," "we," "us," and "our" refer to the company operating this platform. References to "you" or "your" mean the player or visitor using our services.

AportPlus operates primarily for players based in the Philippines. All services are conducted in Philippine English, all player-facing amounts are displayed in Philippine Peso (₱), and our platform is designed around the needs and preferences of Filipino players. This Privacy Policy is written in plain language with that audience in mind.

AportPlus is the data controller in respect of the personal data it processes about you. This means we determine the purposes for which and the manner in which your personal data is processed. We take this responsibility seriously and have appointed a Data Protection Officer (DPO) — contact details are provided in Section 15 of this Policy.

AportPlus collects different categories of personal data depending on your relationship with our platform — whether you're a registered player, a visitor browsing the site, or someone contacting our support team. Below is a breakdown of the main categories.

Account & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth
• Email address
• Mobile phone number
• Residential address
• Username and hashed password
• Government-issued ID documents (e.g., Philippine passport, SSS ID, Umid card, PhilHealth ID, driver's licence)
• Selfie or facial verification image (for KYC purposes)

Financial & Payment Data

• GCash or Maya mobile wallet number
• Bank account or card details used for deposits and withdrawals (processed securely; AportPlus does not store full card numbers)
• Transaction history — deposits, withdrawals, and betting activity
• Bonus and promotion usage records

Activity & Behavioural Data

• Games played, bets placed, and results
• Session duration and frequency of use
• Device type, operating system, and browser type
• IP address and approximate geographic location
• Pages visited and navigation patterns within the platform

Communications Data

• Live chat transcripts with our support team
• Email correspondence
• Complaint and dispute records

AportPlus collects personal data through several channels, all of which are disclosed here:

• Registration: When you create an AportPlus account, you provide your name, date of birth, email, mobile number, and address directly to us.
• Identity Verification (KYC): Before your first withdrawal, we request a copy of a government-issued ID and a selfie or facial verification image. This is a regulatory requirement and helps protect your account from unauthorised access.
• Deposits and Withdrawals: Payment data is collected when you transact through our platform. We integrate with payment providers like GCash, Maya, and Philippine banks — these providers process transactions securely and share the minimum data required to complete your transaction.
• Platform Usage: We collect behavioural and technical data automatically as you use the AportPlus platform — through cookies, server logs, and similar technologies. This is explained in more detail in Section 10.
• Support Interactions: When you contact our customer support team, we record the interaction to help resolve your issue and improve our service.
• Third Parties: In some cases, we may receive data from third-party fraud prevention services or identity verification providers that we use as part of our KYC process.

AportPlus uses your personal data for specific, legitimate purposes. We do not collect data speculatively or for purposes we haven't thought through. Here is a table of the main uses and the data involved:

Where data use is marked "Optional," it means you can opt out without affecting your ability to use the core AportPlus platform. See Section 11 (Your Rights) for how to manage these preferences.

AportPlus processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Most data processing at AportPlus is necessary to fulfil the contract we have with you — i.e., to operate your account, process your bets, and pay out your winnings. Without this processing, we cannot provide the service.
• Legal obligation: As a licensed gaming operator, AportPlus is subject to anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and responsible gaming obligations. These require us to collect and process certain data regardless of your preferences.
• Legitimate interests: We process some data based on our legitimate interests, including fraud prevention, platform security, and improving our service. We only rely on this basis where our interests do not override your fundamental privacy rights.
• Consent: For optional activities such as marketing communications and personalised promotions, we rely on your consent. You may withdraw consent at any time without affecting data processing carried out on other legal bases.

AportPlus does not sell your personal data. We share your data only in the circumstances described below, and only to the extent necessary for each purpose:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and card networks receive the minimum data required to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are bound by data processing agreements with AportPlus.
• Identity verification providers: Third-party KYC and age verification services receive your identity documents and facial verification data to complete the verification process. These providers are contractually bound to process your data only for that specific purpose.
• Fraud prevention and AML services: We share transaction data and risk indicators with specialised fraud prevention and anti-money laundering service providers as required by our regulatory obligations.
• Regulatory authorities: AportPlus is required by law to report certain transactions and player data to our gaming regulator and, in cases of suspected financial crime, to law enforcement or financial intelligence units.
• Technology and infrastructure providers: Companies that provide the servers, cloud storage, software, and communication tools we use to operate the platform. These are bound by strict data processing agreements.
• Professional advisors: Lawyers, auditors, and accountants who assist us in operating the business lawfully and in good order, bound by professional confidentiality obligations.

AportPlus may transfer your personal data to countries outside the Philippines in the course of operating the platform — for example, to cloud infrastructure providers or international payment processing networks. Where such transfers occur, AportPlus ensures that appropriate safeguards are in place to protect your data to a standard equivalent to Philippine data protection law.

These safeguards may include contractual clauses that require the recipient to protect your data, verification that the destination country has adequate data protection standards, or obtaining your explicit consent where required by law.

If you would like more information about specific international transfer safeguards applied to your data, please contact our Data Protection Officer (see Section 15).

AportPlus retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of 5 years after the date of account closure or the last transaction, as required by anti-money laundering regulations.
• Identity verification documents: Retained for 5 years after the end of the business relationship, or longer if required by a specific regulatory directive.
• Support and communications records: Retained for 3 years from the date of the interaction, or until the resolution of any related dispute or legal claim.
• Cookies and technical data: Session cookies are deleted when you close your browser. Persistent cookies have defined expiry periods as described in Section 10.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to applicable retention obligations.

When data is no longer needed and no legal retention obligation applies, AportPlus will securely delete or irreversibly anonymise the data so that it can no longer be associated with you.

AportPlus takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction.

• Transport security: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption.
• Password security: Account passwords are stored as salted cryptographic hashes — we cannot see your password in plain text, and neither can anyone else with access to our database.
• Two-factor authentication (2FA): Available and encouraged for all AportPlus accounts. 2FA adds a significant layer of protection against unauthorised account access.
• Server-side security: Our infrastructure uses firewalls, intrusion detection systems, and regular penetration testing. Access to production systems is restricted to a small number of authorised personnel using multi-factor authentication.
• Payment data: AportPlus does not store full payment card numbers. Card transactions are processed directly by our PCI-DSS compliant payment partners.
• Staff training: All AportPlus staff with access to player data receive regular data protection training. Access is granted on a need-to-know basis and reviewed periodically.

In the event of a personal data breach that is likely to affect your rights and freedoms, AportPlus will notify you and the relevant regulatory authority within the timeframes required by applicable law.

AportPlus uses cookies and similar tracking technologies to operate the platform, understand how it is used, and improve the player experience. This section explains what types of cookies we use and how to manage them.

Essential Cookies

These are required for the AportPlus platform to function. They handle things like keeping you logged in during a session, maintaining your bet slip, and remembering your display preferences. You cannot opt out of essential cookies without affecting your ability to use the platform.

Analytics Cookies

These help us understand how players navigate the platform — which games are most popular, where players encounter issues, and how different features are used. We use this data to improve the AportPlus experience. Analytics cookies are set by our internal analytics tools and are not shared with advertising networks.

Functional Cookies

These cookies remember your preferences — such as your preferred odds format, language setting, or display options — so you don't have to set them every time you visit.

Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of the AportPlus platform. On your first visit, you will be presented with a cookie preference panel where you can choose which non-essential cookies to accept.

Under the Data Privacy Act of 2012 (Republic Act 10173) and other applicable data protection laws, you have the following rights in relation to your personal data held by AportPlus:

To exercise any of these rights, contact our Data Protection Officer at the details provided in Section 15. We will respond within 30 days of receiving your request. In some cases, we may need to verify your identity before processing the request. Exercising your rights is free of charge.

AportPlus operates a strict 18+ policy. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you are not permitted to use the AportPlus platform or provide any personal data to us.

If AportPlus becomes aware that it has inadvertently collected personal data from a person under 18, that data will be deleted immediately and the associated account will be closed. If you believe a person under 18 has registered on AportPlus, please contact us immediately at support@aportplus.com.

Age verification is conducted during the registration process and again before the first withdrawal is processed. AportPlus treats underage gambling as a serious concern and cooperates fully with authorities where it is identified.

AportPlus may send you marketing communications about promotions, new games, VIP offers, and other platform news — but only with your consent. During registration, you can choose whether to receive these communications via email and/or SMS.

You can withdraw your consent to marketing communications at any time by:

• Clicking the "unsubscribe" link in any AportPlus marketing email
• Updating your communication preferences in your account settings
• Contacting our support team and requesting removal from marketing lists

Withdrawing consent to marketing will not affect your ability to use the AportPlus platform or receive service communications (such as withdrawal confirmations, account security alerts, and support responses). Service communications are not marketing and cannot be opted out of while your account remains active.

AportPlus may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our platform. When we make material changes, we will notify registered players via email and/or an on-site notification at least 14 days before the changes take effect.

The date at the top of this page shows when the Privacy Policy was last updated. We encourage you to review the Policy periodically to stay informed about how AportPlus handles your personal data.

If changes are required urgently due to a legal or regulatory directive, they may take effect immediately. In such cases, we will still notify you as soon as practicably possible.

Your continued use of the AportPlus platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you disagree with the updated Policy, you may close your account and withdraw your balance.

If you have any questions, concerns, or requests related to this Privacy Policy or the way AportPlus handles your personal data, please contact us through any of the following channels. Our Data Protection Officer oversees all privacy-related matters and will respond to formal requests within 30 days.

If you believe that AportPlus has not addressed a privacy concern adequately, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines — the government body responsible for enforcing the Data Privacy Act of 2012. We always encourage you to contact us first, but we acknowledge and respect your right to escalate to the NPC if needed.