fc187 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by fc187.org ("fc187," "we," "us," "the Company") and applies to all personal data processed in connection with the fc187 online gaming platform at fc187.org, including registration, identity verification (KYC), deposits, withdrawals, game play, customer support interactions, and marketing communications (collectively, the "Services").

fc187 is committed to processing your personal data lawfully, fairly, and transparently in accordance with Republic Act No. 10173 — the Data Privacy Act of 2012 ("DPA") — and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC") of the Philippines. As a PAGCOR-regulated gaming operator, fc187 is also subject to data processing obligations arising from PAGCOR licensing conditions and Philippine Anti-Money Laundering Act ("AMLA") compliance requirements.

By registering an account with fc187 or using any of the Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein, to the extent that consent is the applicable legal basis for such processing.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and its IRR, fc187.org is the Personal Information Controller ("PIC") responsible for your personal data collected through the fc187 Platform.

fc187 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection legislation. Contact details for the DPO are provided in Section 14 of this Policy. You may direct any data privacy concerns, rights requests, or complaints to the DPO using those contact details.

3. Categories of Personal Data We Collect

The following table summarizes the categories of personal data fc187 collects and the primary purposes for which each category is processed:

3.1 Sensitive Personal Information

In the course of KYC verification and AMLA compliance, fc187 may collect information classified as "sensitive personal information" under the DPA — specifically, government-issued ID numbers (which may include Philippine passport numbers, SSS/GSIS card numbers, or PhilSys reference numbers). fc187 processes sensitive personal information only to the extent required by law, PAGCOR licensing conditions, and AMLA compliance obligations. Such data is subject to enhanced security measures as described in Section 8 of this Policy.

4. How We Collect Your Personal Data

fc187 collects personal data through the following means:

• Directly from you: Information you provide during account registration, KYC document submission, payment method setup, customer support interactions, and responses to surveys or promotions.
• Automatically through Platform use: Technical data collected automatically when you access the fc187 website or use Platform features, including through cookies, server logs, and analytics tools (see Section 10).
• From payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, and other payment service providers in connection with deposits and withdrawals.
• From identity verification services: Data received from third-party KYC and identity verification service providers used to verify the authenticity of documents you submit.
• From regulatory and law enforcement sources: Data received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine government bodies in the course of regulatory compliance.

5. Purposes and Legal Basis for Processing

fc187 processes your personal data on the following legal bases as defined in the DPA:

• Performance of a contract: Processing necessary to create and maintain your fc187 account, process your deposits and withdrawals, enable game play, and provide customer support.
• Compliance with a legal obligation: Processing required by PAGCOR licensing conditions, the Anti-Money Laundering Act (R.A. 9160 as amended), the SIM Card Registration Act (R.A. 11934), and other applicable Philippine laws and regulations.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and the improvement of Services — where such interests are not overridden by your rights as a data subject.
• Consent: Processing for marketing communications (promotional emails, SMS notifications about bonuses and offers), which you may withdraw at any time without affecting the lawfulness of prior processing.

Where fc187 relies on consent as the legal basis for processing, you have the right to withdraw consent at any time by updating your communication preferences in Account Settings or by contacting the fc187 DPO.

6. Data Sharing and Disclosure

fc187 does not sell your personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipients:

6.1 Service Providers and Data Processors

fc187 engages third-party service providers who process personal data on fc187's behalf and under fc187's instructions, including: KYC and identity verification platforms, payment processors (GCash, Maya, BPI, BDO, and others), gaming software providers (for game operation and integrity purposes), IT infrastructure and cloud hosting providers, customer support platform operators, and fraud prevention and cybersecurity service providers. All such providers are subject to data processing agreements that impose data protection obligations consistent with the DPA.

6.2 Regulatory and Government Authorities

fc187 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and courts as required or permitted by applicable Philippine law — including in response to valid legal process, subpoenas, court orders, or regulatory directives. Where permitted by law, fc187 will notify you of such disclosures.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of fc187's business or assets, personal data held by fc187 may be transferred to the successor entity. You will be notified of any such transfer and any material changes to this Policy that result from it.

6.4 No Sale of Personal Data

fc187 does not sell, rent, or trade your personal data to third-party marketers or data brokers. Personal data shared with gaming software providers is limited to the data strictly necessary for the delivery of the relevant game services.

7. Data Retention

fc187 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including the satisfaction of legal, regulatory, accounting, and reporting obligations. The following retention periods apply:

• KYC and identity data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AMLA obligations.
• Financial transaction records: Retained for a minimum of five (5) years after the date of each transaction, in compliance with AMLA requirements.
• Gaming records (bet and win/loss logs): Retained for a minimum of three (3) years after the relevant gaming session, for dispute resolution and regulatory reporting purposes.
• Account data (active accounts): Retained throughout the period of the account relationship and for a minimum of two (2) years after voluntary account closure.
• Customer support communications: Retained for two (2) years from the date of the communication.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as proof of consent management.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with fc187's data disposal procedures.

8. Data Security

fc187 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, and disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the fc187 Platform;
• Encryption of stored sensitive personal data (including KYC documents and financial identifiers) using industry-standard encryption protocols;
• Two-factor authentication (2FA via SMS OTP) available for all fc187 accounts;
• Role-based access controls limiting fc187 staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the fc187 Platform;
• Login monitoring with automated alerts for suspicious access patterns;
• Data breach response procedures in compliance with NPC breach notification requirements under the DPA.

While fc187 takes robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your fc187 login credentials and for notifying fc187 immediately upon discovering any unauthorized access to your account.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data held by fc187:

To exercise any of these rights, submit a written request to fc187's Data Protection Officer using the contact details in Section 14. fc187 will respond to rights requests within fifteen (15) business days of receipt, as required by the DPA IRR. Requests may require identity verification before processing. If you are not satisfied with fc187's response, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10. Cookies and Tracking Technologies

The fc187 Platform uses cookies and similar tracking technologies to operate correctly, secure user sessions, and analyze platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for Platform functionality — session authentication, security tokens, load balancing. These cannot be disabled without disrupting Platform operation.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and session timeout preferences.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform — pages visited, session duration, game categories accessed. Used to improve Platform performance and user experience. No personally identifiable information is transmitted via analytics cookies.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

fc187 does not use third-party advertising or behavioral tracking cookies. You may manage cookie preferences through your browser settings, noting that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Continued use of the fc187 Platform following acceptance of this Policy constitutes consent to the use of cookies as described above.

11. Minors and Age Restriction

The fc187 Platform is strictly for adults aged 21 years and older, in accordance with PAGCOR regulations governing casino-style gaming in the Philippines. fc187 does not knowingly collect personal data from individuals under 21 years of age.

Where fc187 discovers that personal data has been collected from an individual who is under 21 years of age, the account will be immediately suspended, the personal data will be deleted (subject to any mandatory legal retention obligations arising from the underage registration event), and the matter may be referred to PAGCOR.

If you believe that fc187 has inadvertently collected personal data from a minor, please notify the DPO immediately using the contact details in Section 14.

12. Cross-Border Data Transfers

fc187's primary operations are based in the Philippines and personal data is processed primarily within the Philippines. However, some of fc187's third-party service providers — including gaming software providers, IT infrastructure providers, and KYC verification platforms — may process personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, fc187 ensures that such transfers are subject to appropriate safeguards, including: data processing agreements that impose data protection standards consistent with the DPA; transfers to jurisdictions recognized by the NPC as providing adequate data protection; or other lawful transfer mechanisms as recognized under the DPA IRR.

13. Updates to This Privacy Policy

fc187 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, NPC guidance, PAGCOR requirements, or Platform developments. Material changes to this Policy will be communicated to registered players via the email address or mobile number on file at least seven (7) days before the effective date of the change.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the fc187 Platform following the effective date of any update constitutes your acknowledgment of the revised Policy.

14. Contact and Data Protection Officer

For any questions, concerns, or rights requests related to this Privacy Policy or fc187's data processing practices, please contact fc187's Data Protection Officer:

• DPO Email: [email protected] (plain text — not a clickable link)
• General Support: [email protected]
• Live Chat: Available 24/7 through the support widget on fc187.org
• Response Time: fc187 aims to acknowledge DPO requests within 3 business days and provide a full response within 15 business days as required by the DPA IRR.

If you are not satisfied with fc187's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through NPC's official channels as published on the Philippine government's NPC website.