Overview
At IronPlay, your privacy is not just a legal checkbox — it's a core part of how we operate. This IronPlay Privacy Policy explains in clear terms what personal information we collect when you use ironplay.best, how that data is used, and the rights you have over your own information.
This Privacy Policy applies to all IronPlay members, website visitors, and anyone who interacts with our platform — whether you're here to bet on football, play JILI slots, enjoy our live casino, or just browse. By using IronPlay, you agree to the data practices described in this policy.
We comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. We also align with internationally recognised best practices for data protection, because we believe every Filipino player deserves nothing less than the highest standard of privacy protection.
Last Updated: July 2025. When this IronPlay Privacy Policy is updated, we'll always post the new version here with a revised date. Nagbabago ang mundo — but our commitment to protecting your data stays the same.
Encrypted Data Storage
All your personal and financial data is stored using AES-256 encryption — the same standard used by major banks.
No Data Selling
IronPlay never sells, rents, or trades your personal information to third-party advertisers. Period.
You're in Control
Request a copy of your data, ask us to delete it, or update your preferences any time — it's your right under RA 10173.
DPA Compliant
We are fully compliant with the Data Privacy Act of 2012 and registered with the National Privacy Commission.
Opt-Out Anytime
Don't want marketing emails? Just unsubscribe. We make it easy to control what communications you receive from us.
Local-First Approach
Your data is primarily processed and stored in servers within the Philippines. We keep it close to home.
1. What Personal Data We Collect
When you use IronPlay, we collect certain types of personal data to provide you with a smooth, secure, and personalised gaming experience. Here is a breakdown of the information we gather:
1.1 Information You Provide Directly
- Registration data: Full legal name, date of birth, email address, mobile number, and username.
- Identity verification (KYC): Government-issued ID (PhilSys, passport, driver's licence, UMID), selfie with ID, and proof of address.
- Financial information: GCash/Maya mobile number, bank account details (BDO, BPI, UnionBank), or Visa/Mastercard card details for deposits and withdrawals. We never store full card numbers — only tokenised references.
- Communications: Messages sent to our support team via live chat or email.
1.2 Data We Collect Automatically
- Device & browser data: IP address, browser type, operating system, device model, and screen resolution.
- Usage data: Pages visited, games played, bets placed, session duration, and click behaviour.
- Location data: General geolocation based on IP address (used for compliance and fraud prevention).
- Cookies and tracking technologies: Session cookies, analytics cookies, and preference cookies. See Section 5 for full details.
Play with Confidence at IronPlay
Whether you're at MOA or anywhere across Metro Manila, your IronPlay account data is always protected.
Secure from Boracay to Batangas
Your personal data travels with end-to-end encryption — kahit saan ka maglaro, you're always safe with IronPlay.
2. How We Use Your Personal Data
IronPlay uses the personal data we collect for specific, legitimate purposes. We do not use your data for anything beyond what is described here without your consent.
| Purpose | Data Used |
|---|---|
| Account creation and management | Name, email, mobile, date of birth |
| Identity verification (KYC/AML) | Government ID, selfie, proof of address |
| Processing deposits and withdrawals | Payment method details, transaction history |
| Fraud detection and prevention | IP address, device data, behaviour patterns |
| Customer support | Name, account info, chat/email history |
| Personalised gaming experience | Game history, preferences, session data |
| Responsible gaming monitoring | Betting patterns, deposit/loss history |
| Marketing communications (opt-in) | Email address, mobile number |
| Legal and regulatory compliance | All data as required by law |
3. Legal Basis for Processing
Under the Philippine Data Privacy Act, IronPlay processes your personal data on the following lawful grounds:
- Contract performance: Processing your registration, deposits, withdrawals, and gameplay is necessary to deliver the services you signed up for.
- Legal obligation: We are required by Philippine gaming regulators and anti-money laundering rules to collect and retain certain data.
- Legitimate interests: Fraud prevention, platform security, and responsible gaming monitoring are in both IronPlay's and our members' interests.
- Consent: For marketing communications and non-essential cookies, we rely on your explicit opt-in consent, which you can withdraw at any time.
4. Data Sharing & Third Parties
IronPlay does not sell or rent your personal data. However, to operate our platform properly, we do share data with carefully selected third parties under strict confidentiality agreements:
Who We May Share Data With
- Payment processors: GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet, BDO, BPI, UnionBank, and card networks — solely to process your transactions.
- Identity verification providers: Third-party KYC/AML services that help us verify your identity as required by Philippine law.
- Game providers: Licensed game studios whose titles are hosted on IronPlay may receive anonymised session data for game performance monitoring.
- Analytics and fraud tools: Services that help us detect unusual activity and improve platform performance — they receive anonymised or pseudonymised data only.
- Regulators and law enforcement: When legally required to do so by Philippine authorities, courts, or gaming regulators.
All third parties that process IronPlay member data are bound by data processing agreements and are required to meet privacy standards consistent with Philippine law and this Privacy Policy.
Filipino-First Privacy — Designed Around You
IronPlay's privacy practices are built around the needs of Filipino players. Every kabayan who plays here deserves full transparency and control over their personal data.
6. Data Security Measures
Keeping your data safe is something we invest in heavily at IronPlay. Here's what we put in place to make sure your information stays protected:
-
1TLS/SSL Encryption All data transmitted between your device and IronPlay servers is encrypted using TLS 1.3 — the latest and most secure web encryption standard.
-
2AES-256 Data Encryption at Rest Personal and financial data stored on our servers is encrypted using AES-256, the same standard trusted by global financial institutions.
-
3Two-Factor Authentication (2FA) Members are encouraged to enable 2FA on their IronPlay account for an extra layer of login protection.
-
4Access Controls Only authorised IronPlay personnel with a legitimate business need can access member data — and all access is logged and audited.
-
5Regular Security Audits Our platform undergoes regular third-party penetration testing and security reviews to identify and close vulnerabilities before they become a risk.
-
6Breach Response Protocol In the unlikely event of a data breach, IronPlay will notify affected members and the National Privacy Commission within 72 hours, as required by RA 10173.
While we take every reasonable precaution, no online platform can guarantee 100% security. We strongly encourage you to use a strong, unique password for your IronPlay account and never share your login credentials with anyone.
7. Your Data Rights
Under the Philippine Data Privacy Act, you have a clear set of rights when it comes to your personal data held by IronPlay. We take these rights seriously and have processes in place to honour each one promptly:
- Right to be Informed: You have the right to know what personal data we collect and how it is used — which is exactly why this IronPlay Privacy Policy exists.
- Right to Access: You can request a full copy of the personal data IronPlay holds about you at any time.
- Right to Rectification: If any of your data is inaccurate or outdated, you have the right to have it corrected. Most updates can be done directly through your account settings.
- Right to Erasure: You can request deletion of your personal data, subject to our legal obligations to retain certain records (e.g., AML requirements).
- Right to Object: You can object to certain types of data processing, particularly direct marketing. Unsubscribing from our emails is immediate.
- Right to Data Portability: You can request your data in a structured, commonly used format for transfer to another service.
- Right to File a Complaint: If you believe IronPlay has violated your privacy rights, you may file a complaint with the National Privacy Commission of the Philippines.
To exercise any of these rights, contact our Data Protection Officer at privacy@ironplay.best. We will respond to all valid requests within 15 business days.
8. Data Retention
IronPlay does not keep your data longer than necessary. Here are the general retention periods we follow:
- Active account data: Retained for as long as your account is open and active.
- Transaction records: Kept for a minimum of 5 years from the date of each transaction, as required by Philippine AML regulations.
- KYC documents: Retained for 5 years after account closure to comply with identity verification requirements.
- Support correspondence: Kept for 3 years to resolve any disputes or ongoing issues.
- Marketing data: Deleted promptly upon opt-out or within 30 days of account closure if not needed for legal purposes.
Once the applicable retention period expires, data is securely deleted or permanently anonymised.
9. Protection of Minors
IronPlay is strictly an adult platform. Our services are intended only for users who are 21 years of age or older as per Philippine gaming regulations. We do not knowingly collect personal data from individuals under this age.
If we discover that personal data has been collected from a minor, we will immediately delete that information and close the associated account. If you believe a minor has registered on IronPlay, please contact us at support@ironplay.best so we can take immediate action.
Parents and guardians are encouraged to use parental controls and monitoring tools to prevent underage access to online gaming platforms. IronPlay fully supports the responsible gaming safeguards described in our Responsible Gaming section.
10. Changes to This Privacy Policy
IronPlay may update this Privacy Policy from time to time to reflect changes in our services, applicable laws, or data processing practices. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Send a notification to your registered email address if the changes are significant.
- Post a notice on the IronPlay platform to let active members know.
We encourage you to review this IronPlay Privacy Policy periodically. Your continued use of the platform after changes are posted means you accept the updated policy.
11. Contact Us & Data Protection Officer
IronPlay has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please get in touch:
- General Support: support@ironplay.best
- Data Privacy Enquiries / DPO: privacy@ironplay.best
- Website: ironplay.best
- Response Time: All privacy-related requests are handled within 15 business days.
If you feel your privacy rights have not been upheld after contacting us, you also have the right to raise a complaint directly with the National Privacy Commission of the Philippines (NPC).
Ready to Join a Platform That Respects Your Privacy?
IronPlay gives you a safe, transparent, and genuinely fun gaming experience — backed by strong data protection from registration to withdrawal. Tara, sumali na!