Privacy Policy

Pauper League Philippines (PLPH) is a community-run Magic: The Gathering tournament organizer based in the Philippines. We operate the PLPH Pauper Team Fight platform at this website to manage 3v3 Swiss-format team tournaments.

PLPH is a proud partner of Lega Pauper Italia , the Italian Pauper League, sharing competitive infrastructure and community resources across our organizations.

For privacy-related inquiries, contact us at: plph.official@gmail.com

We collect only what is necessary to operate the tournament platform:

We do not collect payment details, government IDs, or any sensitive personal information as defined under the Data Privacy Act.

Your information is used solely to run the tournament platform:

• Authenticate you and maintain your session
• Register your team and generate Swiss-round pairings
• Record and display match results and standings
• Validate deck pools against Pauper-legal card lists (via Scryfall)
• Send transactional emails (e.g., password resets)
• Detect and resolve match disputes
• Share aggregate, anonymized event statistics with partner leagues (including Lega Pauper Italia) for competitive-format research

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

Under Republic Act No. 10173 (Data Privacy Act of 2012) and the National Privacy Commission's Implementing Rules and Regulations, we process your personal data on the following bases:

• Consent — by creating an account and registering for a tournament, you consent to data processing as described in this policy.
• Contractual necessity — processing required to register you in a tournament and manage your participation.
• Legitimate interests — maintaining platform security, preventing result fraud, and sharing aggregate data with partner leagues.

• Account data — retained while your account is active. Deleted within 30 days of a verified deletion request.
• Tournament & match records — retained indefinitely for historical standings and competitive integrity. Player names may remain attached to historical records even after account deletion.
• Session tokens — expire automatically or on logout.
• Server access logs — retained for up to 90 days for security purposes.

As a data subject under the Data Privacy Act of 2012, you have the following rights:

To exercise any of these rights, email us at plph.official@gmail.com with the subject line "Data Privacy Request". We will respond within 15 business days as required by the NPC.

You may also file a complaint with the National Privacy Commission of the Philippines if you believe your rights have been violated.

We use a single, strictly-necessary session cookie to keep you signed in. This cookie:

• Is HttpOnly and Secure — inaccessible to JavaScript and only sent over HTTPS
• Expires when you log out or close your browser session
• Does not track you across other websites

We do not use advertising cookies, analytics trackers, or third-party pixels.

We take reasonable technical and organizational measures to protect your data:

• Passwords are hashed using bcrypt — irreversible one-way hashing
• All connections are served over HTTPS/TLS
• Session tokens are cryptographically signed and stored in the database
• Admin access is role-restricted and audited

No system is perfectly secure. In the unlikely event of a data breach affecting your personal information, we will notify affected users and the National Privacy Commission within 72 hours of discovery, as required by the Data Privacy Act.

This platform is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has registered without parental consent, please contact us and we will remove the account promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Material changes will be announced on the platform. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.