duckdice Privacy Policy

1. Introduction

duckdice ("duckdice," "we," "us," or "our") operates the online gaming platform accessible at https://duckdice.one (the "Platform"). We are committed to protecting the privacy and personal data of all users ("you" or "Player") in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and other applicable data protection regulations.

This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it, and the rights you have with respect to your personal data. Please read this policy carefully. If you do not agree with the practices described here, you should not use the duckdice Platform.

This Privacy Policy should be read together with our Terms and Conditions, which govern your use of the Platform and are incorporated herein by reference.

2. Personal Data We Collect

duckdice collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., Philippine passport number, SSS ID, PhilSys ID, driver's license number).
• Contact Data: Residential address (including barangay, city, and province), email address, and Philippine mobile number.
• Financial Data: GCash account details, PayMaya account details, BPI, BDO, or Metrobank account information used for deposits and withdrawals, and transaction history.
• Account Data: Username, encrypted password, account preferences, communication preferences, and bonus history.
• Gaming Data: Game session history, wagering activity, win/loss records, and responsible gaming tool usage (e.g., deposit limits, self-exclusion requests).
• Technical Data: IP address, device type, browser type and version, operating system, time zone, and cookies or similar tracking technologies.
• Communications Data: Records of your interactions with our customer support team, including live chat transcripts and email correspondence.
• KYC Verification Data: Copies of government-issued identification documents and proof of address submitted during the Know Your Customer (KYC) verification process.

We collect this data directly from you when you register, make a deposit or withdrawal, contact support, or use the Platform. We may also collect technical data automatically through cookies and similar technologies as described in Section 6.

3. How We Use Your Personal Data

duckdice uses your personal data for the following purposes:

• To create and manage your player account and verify your identity in accordance with KYC requirements.
• To process deposits, withdrawals, and other financial transactions on the Platform.
• To provide access to games, promotions, and other Platform features.
• To comply with anti-money laundering (AML) obligations and report suspicious transactions to relevant Philippine authorities where required by law.
• To enforce our Terms and Conditions, including detecting and preventing fraud, bonus abuse, and other prohibited conduct.
• To administer responsible gaming tools, including deposit limits, session reminders, and self-exclusion, and to monitor gaming activity for signs of problem gambling.
• To communicate with you regarding your account, transactions, promotions, and Platform updates via email or SMS.
• To improve the Platform through analytics, user experience research, and technical performance monitoring.
• To respond to your customer support inquiries and resolve disputes.
• To comply with applicable laws, regulations, and court orders.

duckdice does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or with your explicit consent.

4. Legal Basis for Processing

duckdice processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., the Terms and Conditions), including account management, payment processing, and game provision.
• Legal Obligation: Processing is required to comply with applicable laws, including AML regulations, KYC requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for our legitimate interests, including fraud prevention, Platform security, and improving our services, provided these interests are not overridden by your rights.
• Consent: Where we rely on your consent (e.g., for marketing communications), you may withdraw that consent at any time by contacting us or updating your account preferences.

5. Data Sharing & Disclosure

duckdice does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers to facilitate deposits and withdrawals.
• Game Providers: Licensed third-party game providers who supply the games available on the Platform, to the extent necessary for game operation and fairness auditing.
• Identity Verification Services: Third-party KYC and AML compliance providers who assist with identity verification and fraud detection.
• Regulatory Authorities: Philippine government agencies, including the National Privacy Commission (NPC) and relevant gaming regulators, where disclosure is required by law or court order.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and analytics providers who process data on our behalf under strict data processing agreements.

All third parties with whom we share personal data are required to maintain appropriate technical and organizational security measures and to process your data only in accordance with our instructions and applicable law.

6. Cookies & Tracking Technologies

duckdice uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use the Platform.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function, including session management and security. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and login status, to improve your experience.
• Analytics Cookies: Help us understand how users interact with the Platform so we can improve performance and content.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. By continuing to use the Platform, you consent to our use of cookies as described in this Policy.

7. Data Retention

duckdice retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and our legitimate business interests. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in accordance with AML and tax record-keeping requirements under Philippine law.
• KYC verification documents are retained for the period required by applicable regulations, typically five (5) years from the date of the last transaction.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Technical and analytics data is retained for up to two (2) years.

When personal data is no longer required for the purposes for which it was collected, duckdice will securely delete or anonymize it in accordance with our data retention procedures.

8. Data Security

duckdice implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial information and KYC documents.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments.
• Two-factor authentication options for player accounts.

While duckdice takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

9. Your Data Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by duckdice:

• Right to be Informed: The right to know what personal data we collect and how it is used, as described in this Policy.
• Right of Access: The right to request a copy of the personal data we hold about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within thirty (30) days.

10. Children's Privacy

The duckdice Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, return any deposited funds to the payment source, and delete the personal data in question. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

11. International Data Transfers

duckdice primarily processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, cloud infrastructure providers or game suppliers), duckdice ensures that such transfers are conducted in accordance with the Data Privacy Act of 2012 and that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to maintain standards of data protection equivalent to those applicable in the Philippines.

12. Changes to This Privacy Policy

duckdice reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this Policy. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

Email: [email protected]

Our support team is available 24 hours a day, 7 days a week via live chat on the Platform. For formal data subject requests, please use the email address above and include "Data Privacy Request" in the subject line.

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you are not satisfied with our response to your data privacy concern.