Privacy Policy — Supeace Online Gaming Philippines

This Privacy Policy describes how Supeace ("we," "us," or "our") collects, uses, stores, shares, and protects the personal data of players and visitors who use the Supeace platform at supeace.net. It applies to all services operated under the Supeace brand, including online casino games, sports betting, card games, and all associated account and payment features.

Supeace operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). We take these obligations seriously, and this policy is designed to give you a complete and honest picture of how your personal data is handled — written in everyday language, not legal jargon.

By creating a Supeace account or by continuing to use the platform after this policy is updated, you acknowledge that you have read and understood its contents. If anything here is unclear, please contact our Data Protection Officer directly at support@supeace.net before continuing to use the platform.

Supeace collects personal data in five broad categories. The table below describes what we collect and why each category is needed.

Supeace does not collect sensitive personal information (such as health records, religious affiliation, or political beliefs) and has no legitimate purpose requiring it. We collect only what is proportionate to the services we provide.

Supeace collects your personal data through three main channels:

Directly From You

When you register a Supeace account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or update your account settings, you provide personal data directly to us. You are always informed of what data is required and why at the point of collection.

Through Your Use of the Platform

As you use Supeace — placing bets, playing Tongits, joining a Poker tournament, watching Sabong, or browsing Betting Odds — we automatically log data about your activity. This includes the games you play, the bets you place, your session duration, and your responsible gaming tool settings. This data is essential for account management, dispute resolution, and regulatory compliance.

From Third-Party Sources

Supeace may receive limited personal data from payment processors (such as GCash, Maya, or BDO) to confirm payment status, or from identity verification service providers used in the KYC process. We only use data from third parties that are themselves compliant with Philippine data protection law and that have the right to share your data with us.

Supeace uses your personal data for the following specific purposes — and no others:

• Account creation and management: Setting up your Supeace account, authenticating your identity when you log in, and maintaining your account preferences and settings.
• Processing bets and payments: Crediting deposits to your wallet, processing withdrawal requests, and maintaining accurate transaction records for your account history.
• KYC and age verification: Verifying that you are at least 18 years old and that your identity matches the payment methods registered on your account, as required by PAGCOR licensing conditions.
• Fraud detection and account security: Monitoring for suspicious login attempts, unusual betting patterns, collusion, multi-accounting, and other activities that could harm you or the integrity of Supeace.
• Responsible gaming monitoring: Tracking your deposit limits and gaming activity to ensure the responsible gaming tools you have set are being respected, and identifying patterns that may indicate problem gambling for early intervention.
• Customer support: Responding to your questions, resolving disputes, and processing complaints accurately and completely.
• Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, the Philippine Data Privacy Act, Anti-Money Laundering Act (AMLA), and other applicable Philippine law.
• Platform improvement: Using aggregated, anonymised data to understand how the platform is used and to improve performance, game selection, and user experience. No individual player is identified in this analysis.
• Marketing communications: Sending you promotions, bonus offers, and tournament notifications by email or SMS — but only if you have opted in to receive these. You can opt out at any time.

Under the Philippine Data Privacy Act, every processing activity must have a legal basis. For Supeace, the relevant bases are:

• Contractual necessity: Processing required to fulfill our obligations to you under the Supeace Terms and Conditions — such as processing payments, maintaining your account, and settling bets.
• Legal obligation: Processing required to comply with Philippine law — such as KYC under PAGCOR regulations, AML transaction monitoring under the AMLA, and data retention under tax and gaming regulations.
• Legitimate interest: Processing necessary for Supeace's legitimate interests in operating a safe and fair gaming platform — such as fraud detection, security monitoring, and responsible gaming oversight — where these interests are not outweighed by your privacy rights.
• Consent: Processing where you have given explicit, informed consent — such as receiving marketing communications. Consent can be withdrawn at any time without affecting your account.

Supeace does not sell, rent, or trade your personal data to any third party. We share your data only where it is strictly necessary to deliver the Supeace service, protect the platform, or comply with the law. The categories of recipients are:

• Payment processors: GCash (Mynt), Maya (Voyager), GrabPay, Coins.ph, InstaPay/PESONet operators, and card payment networks (Visa, Mastercard) receive only the transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC services may receive your ID documents for verification processing. These providers are bound by data processing agreements and operate under standards equivalent to RA 10173.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and Philippine law enforcement agencies may receive data as required by law or court order. Supeace will notify you of any such disclosure where legally permitted to do so.
• Technology infrastructure providers: Cloud hosting and platform infrastructure partners who process data on our behalf under strict data processing agreements that prohibit any independent use of your data.

All third-party data processors engaged by Supeace are evaluated for their data protection standards before engagement, and all are contractually bound to process your data only as directed by Supeace and in compliance with applicable Philippine law.

Supeace primarily stores and processes player data on servers located within or accessible from the Philippines. In some cases, technical infrastructure or identity verification services may involve data being processed in servers located in other jurisdictions.

Where such transfers occur, Supeace ensures that appropriate safeguards are in place — including contractual data transfer agreements that require the recipient to apply data protection standards at least equivalent to those required under RA 10173. Supeace does not transfer personal data to jurisdictions that do not provide an adequate level of protection without first implementing the required safeguards.

Supeace retains your personal data only for as long as it is needed for the purpose it was collected, or as required by applicable law. Our general retention guidelines are:

• Account data (name, contact details, login history): retained for the duration of your active account, plus 5 years after account closure, in line with PAGCOR licensing and tax record requirements.
• Financial transaction records (deposit and withdrawal history): retained for a minimum of 5 years after the transaction date, as required under the Philippine AMLA and tax regulations.
• KYC documents (government ID copies, verification photographs): retained for the duration of your account and for 5 years after closure. Securely destroyed after retention period expires.
• Betting and gaming history: retained for 5 years for regulatory compliance and dispute resolution purposes.
• Marketing preferences and communications: retained while your account is active and for 1 year after your last engagement or opt-out, whichever is later.
• Technical logs (IP addresses, session data): retained for up to 12 months for security and fraud detection purposes.

After the applicable retention period expires, personal data is securely deleted or anonymised so it can no longer be linked to you.

Supeace implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure. These include:

• TLS/SSL encryption on all pages and data transmissions between your device and Supeace servers.
• Encrypted data storage for all sensitive fields including passwords (hashed and salted), ID document images, and payment details.
• Two-factor authentication (2FA) available for all player accounts, strongly recommended and enabled by default for accounts processing large transactions.
• Role-based access controls within Supeace operations, ensuring that staff can only access the specific data necessary for their defined role.
• Continuous fraud and intrusion monitoring with automated alerts for unusual access patterns or suspicious activity.
• Regular security audits and penetration testing by independent security professionals.
• Incident response plan: In the event of a data breach that could cause real harm to you, Supeace will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC regulations.

Supeace uses cookies and similar tracking technologies to make the platform work correctly, keep your session secure, and understand how the platform is being used in aggregate. The cookies we use fall into three categories:

Supeace does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external ad networks. You can manage your cookie preferences through the Supeace cookie settings panel, accessible from the footer of any page. You can also control cookies through your browser settings, though disabling essential cookies will prevent you from logging in.

Under the Philippine Data Privacy Act, you have the following rights over your personal data held by Supeace. These rights are available to all registered players and can be exercised free of charge by contacting our Data Protection Officer.

To exercise any of these rights, email support@supeace.net with "Data Rights Request" in the subject line. We will acknowledge your request within 3 business days and respond in full within 30 days. Identity verification may be required before we process your request.

Supeace is strictly an 18+ platform and does not knowingly collect personal data from persons under the age of 18. If you believe a minor has registered an account or provided personal data to Supeace, please notify us immediately at support@supeace.net. We will investigate promptly, close any confirmed underage account, and delete all associated personal data as quickly as practicable subject to any conflicting legal obligations.

We encourage parents and guardians to use parental control software on devices shared with minors to prevent access to gambling platforms including Supeace.

Supeace may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable Philippine law, or improvements in our data practices. When we make material changes — changes that meaningfully affect your rights or how your data is processed — we will notify you via the email address registered on your account and by displaying a prominent notice on the Supeace platform.

The updated policy will be published on this page with a revised "Last Updated" date. We encourage you to review this page periodically. If you disagree with any updated terms, you may close your Supeace account before the effective date of the change and your verified balance will be returned to you.

Supeace has appointed a Data Protection Officer (DPO) who is responsible for overseeing our compliance with the Philippine Data Privacy Act and related regulations. If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how Supeace has handled your personal data, please contact the DPO directly:

• Email: support@supeace.net (Subject: "Data Privacy / DPO")
• Response time: Acknowledgement within 3 business days, full response within 30 calendar days
• Languages: Filipino and English

If you have contacted the DPO and remain unsatisfied with the response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information about NPC complaints can be found on the Commission's official website.