Privacy Policy

Last updated: 20 June 2026

Working draft · private beta. Not our final policy — we'll finalize it before public launch. You joined KantoPay directly through the dev/owner, so you already know who's behind it and what you're getting into.

This Privacy Policy explains how KantoPay ("we", "us", or "our") collects, uses, and protects your personal data when you use our Platform. It is designed to comply with the Philippine Data Privacy Act of 2012 (RA 10173). It applies to Creators (game-server owners who operate storefronts) and Buyers (players who purchase items through Creator storefronts).

1. Information we collect

We collect only the information necessary to provide and secure our services.

Creators: mobile number, hashed PIN, store details, payout method and account details, transaction history, and wallet history.
Buyers: player name, optional email address (for receipts / gift cards), in-game recipient details, and items purchased.
Payment data: card and e-wallet details are collected directly by our BSP-licensed payment processor. KantoPay does not store full card numbers.
Automated data: basic device and usage data, and IP addresses needed to run the site securely.
Cookies and tracking: we use cookies to keep you logged in, remember your preferences, and secure the Platform. You can set your browser to refuse cookies or to warn you when one is sent — but if you do, essential parts of KantoPay (such as logging in or completing checkout) may not work properly.

2. How we use your data

Platform operations: to operate your store, process payments, deliver purchased in-game items, and disburse Creator earnings.
Communications: to send essential transactional messages — SMS login codes, email receipts, and gift-card codes.
Security & compliance: to prevent fraud, abuse, and unauthorised access, and to comply with legal obligations.
Improvement: to provide customer support and analyse usage to improve the Platform.

3. How we share your data

We do not sell your personal data. We share it only with trusted third parties as needed to run our services:

Service providers: our BSP-licensed payment processor (to handle transactions), SMS/email providers (to deliver codes and receipts), and secure cloud infrastructure providers.
Cross-border transfers: your data may be stored and processed on secure cloud servers located outside the Philippines. By using the Platform, you consent to this transfer; we require our infrastructure providers to meet recognised data-security standards.
Legal authorities: we may disclose data where required by law, or to protect the rights, property, and safety of KantoPay, our users, or the public.

4. Buyer-to-Creator data sharing

When a Buyer makes a purchase through a Creator's storefront, limited order information (such as player name, items bought, and in-game recipient) is shared with that specific Creator so they can fulfil the order and provide support. Creators are required to handle this data lawfully and only as we instruct — see the Creator Agreement.

5. Third-party links

Creator storefronts may link to external sites we don't operate (Discord servers, social media pages, game wikis). We are not responsible for the privacy practices or content of those sites; please review the privacy policy of any site you visit.

6. Data retention

We keep personal data only as long as needed to provide our services, resolve disputes, and meet legal, tax, and accounting requirements. Once it is no longer required, it is securely deleted or anonymised.

7. Security measures

We use reasonable technical and organisational measures to safeguard your data, including PIN hashing, encrypted transport (HTTPS), and strict access controls. No digital system is 100% secure, but we work diligently to protect your information.

8. Your privacy rights

Under the Data Privacy Act of 2012, you have the right to be informed about, access, correct, object to, or request deletion of your personal data, and to lodge a complaint with the National Privacy Commission (NPC). To exercise these rights, contact our Data Protection Officer using the details below.

9. Children's privacy

KantoPay is intended for users 18 years of age or older. We do not knowingly collect personal data from children. Buyers who are minors may use the Platform only under the supervision and with the consent of a parent or legal guardian.

10. Changes & contact

We may update this Policy; material changes will be posted here with a new "last updated" date. For privacy questions or to exercise your rights, contact our Data Protection Officer:

Email: [email protected] (a dedicated DPO address will be published before public launch)
Address: our registered office, to be published before public launch.