iornplay Privacy Policy

1. Introduction

iornplay ("iornplay," "we," "us," "our") operates the online gaming platform accessible at iornplay.vip. We are committed to protecting the privacy and personal data of all players, visitors, and users ("you," "your") who interact with the iornplay platform.

This Privacy Policy describes how iornplay collects, uses, stores, shares, and protects your personal information in connection with your use of the iornplay website, games, and related services. It also outlines the rights available to you under applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By registering an iornplay account, accessing the iornplay platform, or otherwise providing your personal data to iornplay, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the iornplay platform.

This Privacy Policy should be read together with the iornplay Terms & Conditions, which govern your use of the platform as a whole.

2. Personal Data We Collect

iornplay collects the following categories of personal data from players and platform users:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Residential address (including city, province, and postal code)
• Email address
• Mobile phone number
• Government-issued ID type and number (e.g., PhilSys ID, passport, driver's license, UMID, SSS ID, voter's ID)

2.2 Account Data

• iornplay username and encrypted password
• Account registration date and time
• Account preferences and settings
• Responsible gaming limits and self-exclusion status

2.3 Financial & Transaction Data

• Deposit and withdrawal history
• Payment method details (e.g., GCash account reference, PayMaya reference, bank account name — iornplay does not store full card or bank account numbers)
• Transaction amounts, dates, and statuses
• Bonus and promotional credit history

2.4 Gaming Activity Data

• Games played, bet amounts, and game outcomes
• Session duration and frequency of play
• Wagering history across all iornplay game categories

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Unique device identifiers
• Platform access logs and session timestamps

2.6 Communications Data

• Records of your communications with iornplay customer support
• Feedback, survey responses, and complaint records
• Email and in-platform message history

3. How We Collect Your Data

iornplay collects your personal data through the following means:

3.1 Direct Collection

You provide data directly to iornplay when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account settings.

3.2 Automated Collection

iornplay automatically collects technical and usage data when you access the iornplay platform. This includes data collected through cookies, web beacons, server logs, and similar tracking technologies. See Section 9 for more details on iornplay's cookie practices.

3.3 Third-Party Sources

iornplay may receive data about you from third-party sources, including:

• Payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank) for transaction verification
• Identity verification service providers used for KYC compliance
• Fraud detection and anti-money laundering (AML) screening services
• Analytics providers that help iornplay understand platform usage patterns

4. Purpose of Data Processing

iornplay processes your personal data for the following specific purposes:

5. Legal Basis for Processing

iornplay processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173) and applicable regulations:

• Contractual necessity: Processing required to fulfill iornplay's obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including KYC requirements, AML obligations, and regulatory reporting duties.
• Legitimate interests: Processing necessary for iornplay's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

iornplay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. iornplay may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

6.1 Service Providers

iornplay engages trusted third-party service providers who process data on iornplay's behalf under strict data processing agreements. These include payment processors, KYC verification providers, cloud hosting providers, customer support platforms, and analytics services. All service providers are contractually bound to process your data only as instructed by iornplay and to maintain appropriate security standards.

6.2 Regulatory & Law Enforcement Authorities

iornplay may disclose your personal data to Philippine government agencies, regulatory bodies, or law enforcement authorities where required by law, court order, or regulatory directive. This includes disclosures required under AML regulations and gaming compliance obligations.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of iornplay's business, your personal data may be transferred to the acquiring entity as part of the transaction. iornplay will notify affected players of any such transfer and the privacy practices of the acquiring entity.

6.4 With Your Consent

iornplay may share your data with other third parties where you have provided explicit consent for such sharing.

7. Data Retention

iornplay retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active iornplay account, plus a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine financial regulations.
• Gaming activity data: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer support communications: Retained for three (3) years from the date of the last communication.
• Technical and device data: Retained for up to twelve (12) months from collection, unless required longer for security or fraud investigation purposes.
• Marketing consent records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent.

When your personal data is no longer required, iornplay will securely delete or anonymize it in accordance with industry-standard data disposal practices.

8. Data Security

iornplay implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the iornplay platform
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial identifiers
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Multi-factor authentication requirements for iornplay administrative systems
• Continuous monitoring for suspicious activity and unauthorized access attempts
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, iornplay will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.

9. Cookies & Tracking Technologies

iornplay uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and deliver a personalized gaming experience. The following categories of cookies are used on the iornplay platform:

9.1 Strictly Necessary Cookies

These cookies are essential for the iornplay platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled without significantly impairing your ability to use iornplay.

9.2 Functional Cookies

Functional cookies allow iornplay to remember your preferences — such as your preferred language, display settings, and responsible gaming limits — so you do not need to re-enter them each time you visit.

9.3 Analytics Cookies

iornplay uses analytics cookies to understand how players interact with the platform, which games are most popular, and where technical issues may occur. This data is used in aggregate and anonymized form to improve the iornplay experience. You may opt out of analytics cookies through your iornplay account settings.

9.4 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the iornplay platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

10. Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by iornplay:

• Right to be Informed: You have the right to know what personal data iornplay collects about you and how it is processed — which is the purpose of this Privacy Policy.
• Right to Access: You may request a copy of the personal data iornplay holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data iornplay holds about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to iornplay's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on iornplay's legitimate interests.
• Right to Data Portability: You may request that iornplay provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe iornplay has violated your data privacy rights.

To exercise any of these rights, please contact the iornplay Data Protection Officer at the contact details provided in Section 15 of this Privacy Policy. iornplay will respond to all verified data subject requests within thirty (30) days of receipt.

11. Minors & Age Policy

If iornplay discovers or has reason to believe that personal data has been collected from a person under the age of 21, iornplay will immediately close the associated account, delete the personal data, and refund any deposits made. Any winnings accrued by an underage player will be forfeited.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to iornplay, please contact iornplay support immediately at [email protected] so that appropriate action can be taken.

12. International Data Transfers

iornplay primarily stores and processes your personal data within the Philippines. In certain circumstances, your data may be transferred to and processed in countries outside the Philippines — for example, where iornplay uses cloud infrastructure or service providers with operations in other jurisdictions.

Where such international transfers occur, iornplay ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under Philippine law. These safeguards may include contractual clauses, data processing agreements, or transfers to jurisdictions recognized as providing adequate data protection.

13. Third-Party Services

The iornplay platform may integrate with or reference third-party services — such as payment gateways (GCash, PayMaya, BPI, BDO, Metrobank) — that have their own privacy policies and data practices. iornplay is not responsible for the privacy practices of these third-party services.

When you interact with a third-party payment provider to fund your iornplay account or receive a withdrawal, that provider's own privacy policy governs the collection and use of your data by that provider. iornplay encourages you to review the privacy policies of any third-party services you use in connection with the iornplay platform.

14. Changes to This Privacy Policy

iornplay reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

For significant changes to this Privacy Policy, iornplay will notify registered players via the email address associated with their iornplay account or through a prominent notice on the iornplay platform, at least seven (7) days before the changes take effect.

Your continued use of the iornplay platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Privacy Policy, you must stop using the iornplay platform and may request account closure in accordance with the iornplay Terms & Conditions.

15. Contact & Data Protection Officer

iornplay has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact the iornplay DPO:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.

For general customer support inquiries unrelated to data privacy, please visit the iornplay FAQ page or contact our 24/7 support team at [email protected].