Privacy Policy & Data Protection at Color Game Plus

Last Updated: 2026-09-12

Privacy Policy & Player Data Protection

Color Game Plus (colorgameplus.ph) is committed to safeguarding the digital privacy, financial security, and personal data of every visitor, registrant, and player. This Privacy Policy outlines our legal protocols regarding the collection, processing, storage, and protection of your personal information in strict compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, and international cybersecurity benchmarks.

1. Categories of Personal Data Collected

To deliver seamless gaming services, process real-time transactions, and satisfy legal anti-money laundering mandates, we collect the following categories of data:

Personal Identification Data: Full legal name, residential address, date of birth, and copies of government-issued identity documents (PhilSys National ID, Driver's License, Passport, UMID) collected exclusively during KYC verification to guarantee compliance with the 21+ age mandate.
Contact Details: Verified 11-digit Philippine mobile telephone number and optional email address used for two-factor authentication (2FA) and account recovery.
Financial & Payment Records: GCash and Maya account identifiers, transaction reference IDs, deposit amounts, withdrawal timestamps, and game wagering turnover. We do NOT store your private GCash MPIN, banking passwords, or payment OTP codes.
Technical & Telemetry Information: IP address, device model, operating system version, browser user-agent, session cookies, and network latency metrics to detect unauthorized access and optimize video streaming performance.

2. Lawful Bases and Purposes of Processing

All personal data is processed under legitimate, lawful grounds recognized under Section 12 of Republic Act No. 10173:

Contractual Performance: Creating your player profile, crediting deposits, settling winning wagers, and processing cashouts to your mobile e-wallet.
Regulatory Compliance: Fulfilling mandatory age verification checks, maintaining audit ledgers under Anti-Money Laundering Council (AMLC) guidelines, and upholding PAGCOR responsible gaming frameworks.
Platform Security: Detecting bot syndicates, mitigating DDoS assaults, preventing unauthorized credential abuse, and safeguarding account balances.

3. Data Security, Storage & AES-256 Encryption

We employ rigorous physical, technical, and organizational safeguards to prevent data loss, unauthorized access, or unlawful alteration. All stored databases are encrypted using AES-256 bit encryption at rest, and all network transmissions utilize TLS 1.3 cryptographic protocols. Access to player records is restricted to authorized personnel bound by non-disclosure agreements.

4. Cookie Policy & Web Tracking

Our web application utilizes first-party cookies to manage active login sessions, preserve sound and graphics preferences, and analyze anonymized site traffic. We do not sell or monetize player browsing data to third-party commercial advertisers. Players can adjust browser settings to decline non-essential cookies.

5. Data Breach Notification & Incident Management

In accordance with National Privacy Commission (NPC) Circular 16-03, Color Game Plus maintains an automated Security Incident Response Team (SIRT). In the unlikely event of a security breach involving sensitive personal data, affected data subjects and the National Privacy Commission will be formally notified within 72 hours of incident confirmation, accompanied by technical remediation measures.

6. Statutory Rights of Data Subjects Under Philippine Law

Statutory Right	Legal Scope & How to Exercise
Right to be Informed	You have the right to know how your data is collected, processed, and secured through this public policy.
Right to Access	You may request an electronic copy of your registered profile and transaction history via dpo@colorgameplus.ph.
Right to Rectification	You may correct inaccurate, outdated, or incomplete profile details by submitting updated documentation.
Right to Erasure / Blocking	You may request account deactivation and data deletion, subject to statutory 5-year financial AML retention rules.
Right to Data Portability	You may obtain your personal data in an open, structured, and machine-readable format.

7. Contact Our Data Protection Officer (DPO)

If you have questions, complaints, or wish to exercise your data subject rights, contact our Data Protection Officer at: dpo@colorgameplus.ph.