Data Protection
At starph, your privacy matters as much as your gaming experience. This Privacy Policy explains exactly what data we collect, why we collect it, and how we keep it safe — in plain terms you can actually understand.
Effective Date: January 1, 2026This Privacy Policy is issued by starph and applies to all personal data collected through the starph website (starph.asia), the starph mobile application, and all related services. It is prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
starph is committed to protecting the privacy and personal data of every player, visitor, and user who interacts with our Platform. This Privacy Policy ("Policy") describes how starph collects, uses, stores, shares, and protects personal data in connection with your use of the starph online gaming platform.
By registering an account on starph, accessing the Platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please do not use the starph Platform.
This Policy should be read together with the starph Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
Plain-language note: We collect your data to run your account, keep the Platform secure, comply with Philippine law, and improve your experience. We do not sell your personal data to third parties for their own marketing purposes.
For the purposes of the Philippine Data Privacy Act of 2012, starph acts as the Personal Information Controller in respect of the personal data it collects and processes through the Platform.
starph is responsible for determining the purposes and means of processing your personal data. Where starph engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable law.
If you have any questions about how starph handles your personal data, or wish to exercise any of your data subject rights, please contact our Data Protection Officer using the details provided in Section 15 of this Policy.
starph collects personal data from you in the following categories, depending on how you interact with the Platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, government-issued ID number (e.g., PhilSys, SSS, UMID, passport) | Registration & KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address (city/province) | Registration & account updates |
| Financial Data | GCash number, Maya account reference, bank account details (for withdrawals), transaction history | Deposits, withdrawals & KYC |
| Gaming Data | Game history, bet amounts, win/loss records, session duration, game preferences | During Platform use |
| Technical Data | IP address, device type, browser type and version, operating system, time zone, cookie identifiers | Automatically on Platform access |
| Usage Data | Pages visited, features used, links clicked, search queries within the Platform, referral source | Automatically during browsing |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When you contact us |
starph does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) unless it is strictly necessary for compliance purposes, such as verifying your identity or age. Where sensitive personal information is collected, we apply additional safeguards.
starph uses the personal data it collects for the following purposes:
starph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.
Under the Philippine Data Privacy Act of 2012, starph processes your personal data on the following legal bases:
starph uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the starph website or use the starph app.
starph uses the following types of cookies:
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the starph Platform. For more information on managing cookies, refer to your browser's help documentation.
starph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly as necessary and subject to appropriate safeguards:
All third parties with whom starph shares personal data are required to handle that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.
Some of starph's third-party service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that afforded under Philippine law, starph will implement appropriate safeguards to ensure your data remains protected. These safeguards may include contractual clauses approved by the National Privacy Commission (NPC) or other mechanisms recognised under the Data Privacy Act of 2012 and its Implementing Rules.
By using the starph Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries outside the Philippines, subject to the safeguards described above.
starph will never transfer your personal data internationally in a manner that strips away the protections you are entitled to under Philippine law. If you have questions about specific transfer mechanisms, contact our Data Protection Officer.
starph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
When personal data is no longer required, starph will securely delete or anonymise it in accordance with its data disposal procedures. Anonymised data that can no longer be linked to an identifiable individual may be retained indefinitely for analytical purposes.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by starph:
To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. starph will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act.
Some rights may be limited where starph has a legal obligation to retain data (e.g., AML record-keeping) or where exercising a right would prejudice an ongoing investigation. We will always explain the reason if we are unable to fulfil a request in full.
The starph Platform is strictly intended for individuals aged 21 years and older. starph does not knowingly collect personal data from individuals under the age of 21. The minimum age for casino-style gambling in the Philippines is 21 years, and starph enforces this requirement through its registration and KYC processes.
If starph becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the starph Platform, please contact us immediately at the details provided in Section 15.
Parents and guardians are encouraged to use parental control tools and to monitor their children's online activity to prevent underage access to gambling platforms.
starph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
While starph takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for keeping your starph Login credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.
The starph Platform may contain references to third-party services, such as payment providers. starph is not responsible for the privacy practices of any third-party websites or services. This Policy applies solely to personal data collected by starph through the starph Platform.
We encourage you to review the privacy policies of any third-party services you use in connection with your starph account, including your chosen payment provider (e.g., GCash or Maya), to understand how they handle your personal data.
starph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered users by posting a prominent notice on the Platform and, where practicable, by sending a notification to your registered email address or mobile number.
The updated Policy will be effective from the date indicated at the top of the document. Your continued use of the starph Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. We encourage you to review this Policy periodically. The most current version will always be available at starph.asia/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by starph, please contact our Data Protection Officer (DPO):
starph Data Protection Officer
Email: [email protected]
General Support: [email protected]
Response time: Within 30 days of receipt of a verified request, as required under the Data Privacy Act of 2012.
If you are not satisfied with starph's response to your data protection concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.
All email addresses listed above are for informational reference only and are displayed as plain text. Please do not send sensitive personal data via unencrypted email.
Six core principles that guide every data decision we make at starph — from registration to your last spin.
starph's data practices are built around the Data Privacy Act of 2012 (RA 10173). We follow NPC guidelines and maintain a registered Data Protection Officer to keep your rights protected at every step.
All data transmitted between your device and the starph Platform is protected by TLS encryption. Your login credentials, financial details, and personal information travel securely — always.
starph gives you full data subject rights — access, correction, deletion, portability, and the right to object. Submit a request to our DPO and we'll respond within 30 days, as required by Philippine law.
starph does not sell, rent, or trade your personal data to third parties for their own marketing. Data shared with partners — like GCash or Maya — is strictly limited to what's needed to process your transactions.
starph keeps your data only as long as legally required or operationally necessary. Transaction records are held for five years per AML rules. Everything else is deleted or anonymised on a defined schedule.
In the unlikely event of a data breach, starph follows NPC-mandated notification procedures. Affected players and the National Privacy Commission are informed promptly — no hiding, no delays.
Your data is safe, your rights are protected, and your gaming experience is built on transparency. Join Filipino players who trust starph for fair, secure online entertainment.
21+ only · Gambling is addictive. Know when to stop.