1. Who We Are
VERAplay is an online gaming platform operating under a valid Philippine gaming licence, accessible at https://veraplay.best. We are the data controller responsible for the personal information of players who register and use our platform. This Privacy Policy governs the collection, use, storage, and disclosure of personal data in connection with VERAplay's services.
If you have questions about how your data is handled, you can reach our Data Protection Officer directly using the contact details in Section 13 of this policy.
2. Personal Data We Collect
VERAplay collects different categories of personal data depending on how you interact with the platform. Here is a clear breakdown:
| Category |
Examples |
When Collected |
| Identity Data |
Full name, date of birth, government ID number, selfie/photo |
At registration and during KYC verification |
| Contact Data |
Email address, Philippine mobile number, physical address |
At registration and when updated in account settings |
| Financial Data |
GCash number, Maya account, bank account details, transaction history |
When you make deposits or withdraw funds |
| Gaming Data |
Bets placed, games played, session duration, win/loss history |
Continuously during active use of the platform |
| Technical Data |
IP address, device type, browser, operating system, cookies |
Automatically when you access VERAplay |
| Communication Data |
Support chat logs, email correspondence, complaint records |
When you contact our support team |
3. How We Collect Your Data
VERAplay collects personal data through the following channels:
- Directly from you — when you fill in the registration form, submit verification documents, make transactions, or contact support.
- Automatically — through cookies, server logs, and analytics tools that record how you navigate the platform and what device you use.
- From third-party verification providers — when we conduct identity checks using government database lookups or third-party KYC services, as permitted under Philippine law.
- From payment processors — transaction confirmations and status updates from GCash, Maya, BDO, BPI, UnionBank, and other payment partners are received and stored as part of your account record.
Note: VERAplay does not purchase personal data from data brokers or any other external commercial sources. All data we hold was collected directly in connection with your use of our platform.
4. Why We Use Your Data
VERAplay processes personal data for the following specific purposes, each with a lawful basis under the Philippine Data Privacy Act:
- Account creation and management — to register you as a player, maintain your account, and provide access to the platform (Contractual necessity).
- Identity and age verification — to confirm you meet the eligibility requirements and to prevent underage gambling (Legal obligation and Contractual necessity).
- Processing deposits and withdrawals — to execute financial transactions and maintain accurate records in Philippine Peso (₱) (Contractual necessity).
- Anti-money laundering compliance — to detect and report suspicious financial activity as required under Philippine AML regulations (Legal obligation).
- Responsible gaming monitoring — to identify signs of problem gambling behaviour and apply protective measures where appropriate (Legitimate interest and Legal obligation).
- Customer support — to handle your enquiries, complaints, and feedback efficiently (Contractual necessity).
- Marketing communications — to send you promotional offers and news about VERAplay, only where you have opted in (Consent).
- Platform security and fraud prevention — to detect and investigate fraudulent activity, bonus abuse, and other policy violations (Legitimate interest).
5. Sharing Your Personal Data
VERAplay does not sell your personal data. We share it only in the following limited and necessary circumstances:
- Payment processors — GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, Visa, and Mastercard receive the transaction data necessary to execute your deposits and withdrawals.
- Identity verification services — third-party KYC providers may receive your identity documents and relevant personal details to complete verification checks.
- Gaming licence authority — VERAplay's Philippine gaming regulator may request access to player data as part of compliance audits and investigations.
- Law enforcement — when legally compelled by a valid court order, subpoena, or regulatory demand under Philippine law.
- Group companies — affiliated entities within the VERAplay corporate group may access your data for platform administration purposes, subject to the same data protection standards.
Any third party that receives your data from VERAplay is contractually bound to process it only for the stated purpose and to apply appropriate security measures. They are not permitted to use your data for their own independent purposes.
6. How We Protect Your Data
VERAplay applies multiple layers of technical and organisational security to protect your personal information from unauthorised access, loss, alteration, or disclosure.
- All data in transit between your device and VERAplay is protected with TLS 1.3 encryption — the same standard used by major Philippine banks.
- Stored data is encrypted at rest using AES-256 encryption on secured servers with restricted access controls.
- Access to personal data within VERAplay is restricted to employees and contractors who require it to perform their specific job functions.
- We conduct regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
- All staff with access to personal data are trained on data protection obligations and confidentiality requirements.
If a breach occurs: In the unlikely event of a data breach that poses a risk to your rights, VERAplay will notify affected players and the National Privacy Commission within 72 hours of becoming aware, as required under Philippine law.
7. How Long We Keep Your Data
VERAplay retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following retention periods apply:
- Account and identity data — retained for the duration of your account, plus a minimum of five years after account closure, as required under Philippine financial regulations.
- Transaction records — retained for a minimum of seven years to comply with Philippine anti-money laundering record-keeping requirements.
- Gaming activity logs — retained for three years after account closure for dispute resolution and regulatory audit purposes.
- Marketing preferences — retained until you withdraw consent or request deletion, subject to the legal minimum retention periods above.
- Support communications — retained for two years after the last interaction, or longer if related to an ongoing dispute.
When data is no longer required and the applicable retention period has passed, it is securely deleted or anonymised in a way that cannot be reversed.
8. Cookies and Tracking Technologies
VERAplay uses cookies and similar technologies to operate the platform, remember your preferences, and understand how players use our services. Here is a breakdown of the types of cookies we use:
- Essential cookies — required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of these without stopping the platform from working.
- Performance cookies — collect anonymous data on how players navigate VERAplay — which pages are visited most, where errors occur, and how long sessions last. This data is used to improve the platform.
- Functional cookies — remember your language preferences, display settings, and last-used payment method to reduce the steps you have to repeat on return visits.
- Analytics cookies — VERAplay uses privacy-respecting analytics tools to understand overall platform usage patterns. No personally identifiable data is shared with analytics providers.
You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the platform, though some personalised features may be affected.
9. Your Data Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by VERAplay. To exercise any of these rights, contact our support team or Data Protection Officer using the details in Section 13.
01
Right to be Informed
Know what personal data VERAplay collects about you and why, before or at the time of collection.
02
Right of Access
Request a copy of the personal data VERAplay holds about you, including a summary of how it is used.
03
Right to Rectification
Request correction of inaccurate or incomplete personal data in your account, such as a misspelled name or outdated address.
04
Right to Erasure
Request deletion of your personal data where it is no longer needed for its original purpose, subject to legal retention requirements.
05
Right to Object
Object to processing of your personal data for marketing purposes. Your objection will be actioned immediately with no penalty to your account.
06
Right to Data Portability
Request your personal data in a structured, machine-readable format so you can transfer it to another service if you choose.
VERAplay aims to respond to all data rights requests within 7 business days. Complex requests that require consultation with legal or compliance teams may take up to 30 days, and we will keep you updated if that applies to your request.
10. Minors and Under-21s
VERAplay does not knowingly collect personal data from individuals under 21 years of age. Our registration process includes a date-of-birth requirement, and we conduct age verification checks as part of the standard KYC process.
If VERAplay becomes aware that personal data has been collected from a person under 21 without appropriate parental consent, that account will be immediately suspended and the data will be deleted from our systems. Any funds deposited by an underage player will be returned to the source payment method.
If you believe a minor has registered on VERAplay, please contact us immediately at support@veraplay.best so we can investigate and act accordingly.
11. Third-Party Services and Links
VERAplay's platform may reference or interact with third-party payment processors and verification services in the course of normal operations. These third parties operate their own privacy policies, which VERAplay does not control. However, VERAplay only partners with third parties who meet acceptable data protection standards and are bound by contractual data processing agreements.
VERAplay does not embed third-party advertising networks, social media tracking pixels, or external analytics tools that share your identifiable data with outside companies for purposes unrelated to operating the platform.
12. Changes to This Privacy Policy
VERAplay reviews this Privacy Policy periodically and updates it whenever there are material changes to how we collect or process personal data, or when required by changes in Philippine data protection law.
When material changes are made, registered players will be notified via the email address on their account at least 14 days before the new policy takes effect. The effective date is displayed at the top of this page. Continuing to use VERAplay after the effective date of any update constitutes your acceptance of the revised policy.
We recommend bookmarking this page and checking it periodically, even if you don't receive a notification — minor clarifications may be made without formal notice.
