Privacy Policy

002Bookings.com Privacy Policy 1. Introduction and Scope This Privacy Policy explains how 002Bookings.com, operated by 002Bookings Website Hosting Services (referred to as 002Bookings, we, our, or us), collects, uses, stores, shares, and protects personal information when users access or use the Platform. This Policy applies to all users of the Platform, including players, court owners, and visitors, regardless of how they access the Platform. By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. 2. Personal Information We Collect We may collect the following categories of personal information: 2.1 Account Information Full name Mobile number Email address Username and password (stored in hashed form) Profile photo, if provided 2.2 Booking and Transaction Information Booking reference numbers and booking history Court preferences and session participation records Payment status and transaction records (not full card details) Open Play session records and credit history 2.3 Court Owner Information Business name, court name, and court location Submitted identification, authorization, or verification documents Payout account information (GCash or Maya registered mobile number) Court photos, schedules, pricing, and policy information 2.4 Third-Party Rating Information DUPR rating profile information, where voluntarily linked by the user DUPR display name and rating score, as retrieved from the DUPR platform 2.5 Device and Usage Information Browser type, device type, and operating system IP address and general location information Pages visited, features used, and session activity logs 2.6 Communications and Support Records Support inquiries and correspondence Feedback submitted through Platform channels 3. Legal Basis for Processing 002Bookings processes personal information on the following legal bases under the Data Privacy Act of 1012 (RA 10173): 3.1 Performance of Contract Processing necessary to operate bookings, process payments, issue Open Play credits, manage court listings, and deliver Platform services that users have requested or agreed to. 3.2 Legitimate Interests Processing necessary for fraud prevention, Platform security, abuse detection, system improvement, analytics, and operational purposes, where such interests are not overridden by the data subject's rights and interests. 3.3 Compliance with Legal Obligations Processing required to comply with applicable Philippine laws, regulations, court orders, or lawful requests from government authorities, including tax, anti-money laundering, and consumer protection requirements. 3.4 Consent For processing activities that do not fall under the above bases, including optional features such as third-party rating profile linking, we rely on the user's freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing. 4. How We Use Personal Information We use collected personal information for the following purposes: Creating and managing user accounts and court owner profiles Processing bookings, payments, payouts, and transaction records Operating Open Play sessions, credits, and disruption workflows Verifying court owner listings and payout account details Displaying third-party rating information where linked by the user Sending transactional notifications, booking confirmations, and support communications Sending SMS disruption notifications for owner-initiated rebooking events Preventing fraud, unauthorized access, abuse, and policy violations Improving Platform features, performance, and user experience Complying with applicable laws and regulatory requirements Resolving disputes and enforcing Platform terms 5. Payment Processing Payments on the Platform are processed through Xendit, a licensed third-party payment service provider. 002Bookings does not store full payment card numbers or sensitive authentication data. Payment transaction records, including booking amounts, payment status, and payout records, are retained for operational, accounting, and legal compliance purposes. Payout account information provided by court owners, including GCash or Maya registered mobile numbers, is used solely for disbursement purposes and is shared with the applicable payment provider for payout processing. 6. Third-Party Services and Data Sharing 6.1 Court Owners Booking information, player participation records, and relevant session details may be shared with Court Owners for the purpose of confirming, managing, and honoring bookings and Open Play sessions on the Platform. 6.2 Payment Providers Payment and payout information may be shared with Xendit and, for SMS notifications, with Semaphore, solely for transaction processing and disruption notification purposes. 6.3 DUPR Where a user voluntarily links a DUPR profile, the Platform may retrieve and display DUPR rating information as read only access. No personal information is shared with DUPR beyond what is necessary to retrieve and display the linked profile. DUPR ratings remain the property and responsibility of DUPR. 6.4 Service Providers We may engage third-party service providers for hosting, analytics, communications, security, and Platform operations. Such providers are permitted to process personal information only as necessary to provide their services to 002Bookings and are subject to appropriate data protection obligations. 6.5 Legal and Regulatory Disclosures Personal information may be disclosed to government authorities, regulators, courts, or law enforcement when required by law, regulation, court order, or lawful government request. 7. SMS Communications 002Bookings may send SMS notifications for transactional and disruption-related purposes, including owner-initiated rebooking notifications for affected bookings. SMS messages are sent using Semaphore, a third-party SMS provider. For security and anti-phishing purposes, SMS messages from 002Bookings will not contain clickable links. Users are directed to check their account or booking page directly. SMS notification features and applicable charges may be updated with prior notice to users. 8. Data Retention We retain personal information for as long as necessary to fulfill the purposes outlined in this Policy, including: Account information: retained for the duration of the active account and for a reasonable period after account closure for legal, dispute, and support purposes Booking and transaction records: retained for a minimum of [5 years] for accounting, tax, and legal compliance purposes Court owner verification documents: retained for the duration of the court listing and as required by applicable law Support and communications records: retained for a reasonable period for dispute resolution and quality purposes Device and usage logs: retained for a limited period for security and analytics purposes When personal information is no longer required, it will be securely deleted or anonymized. 9. Data Subject Rights Under the Data Privacy Act of 1012 (RA 10173), users have the following rights regarding their personal information: 9.1 Right to Be Informed You have the right to be informed of how your personal information is collected, used, stored, and shared, including the purposes of processing and the identity of third parties with whom your data may be shared. 9.2 Right to Access You have the right to request access to the personal information we hold about you, including a copy of such information in a commonly used format. 9.3 Right to Rectification You have the right to request correction of inaccurate, incomplete, or outdated personal information. 9.4 Right to Erasure or Blocking You have the right to request the deletion or blocking of personal information where it is no longer necessary for the purpose for which it was collected, or where processing is unlawful, subject to applicable legal retention requirements. 9.5 Right to Data Portability You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format, where technically feasible. 9.6 Right to Object You have the right to object to the processing of your personal information for direct marketing purposes or on grounds relating to your particular situation, subject to applicable exceptions. 9.7 Right to Withdraw Consent Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. 9.8 Right to File a Complaint You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated. To exercise any of the above rights, please contact us at: info@002bookings.com. We will respond to eligible requests within a reasonable period consistent with applicable law. 10. Data Breach Notification 002Bookings maintains reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. In the event of a personal data breach that is likely to result in harm to affected individuals, 002Bookings will: Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required under RA 10173 and NPC Circular 16-03 Notify affected data subjects within a reasonable period where the breach is likely to result in significant harm Conduct an investigation and take reasonable remediation steps 11. Security 002Bookings uses reasonable administrative, technical, and organizational safeguards to protect personal information from unauthorized access, use, disclosure, alteration, and destruction. These include: Encrypted data transmission using industry-standard protocols Access controls limiting personal information access to authorized personnel Secure handling of payout and payment-related information through licensed payment providers Regular review of security practices and Platform controls No security measure is guaranteed to be completely effective. Users are encouraged to use strong passwords, keep their account credentials confidential, and contact us promptly if they suspect unauthorized access to their account. 12. Children's Privacy The Platform is intended for users who meet the applicable age of majority under Philippine law and any other applicable local law. Users below 18 years of age must not create an account or use the Platform without verifiable parental or guardian consent. 002Bookings does not knowingly collect personal information from minors. If we become aware that personal information has been collected from a minor without appropriate consent, we will take reasonable steps to delete such information promptly. 13. Cookies and Tracking Technologies The Platform may use cookies, local storage, or similar tracking technologies to support authentication, session management, security, and Platform performance. Users may manage cookie preferences through their browser settings, subject to functionality limitations that may result from disabling certain cookies. 14. International Users The Platform is operated in the Philippines and is primarily intended for users located in the Philippines. If you access the Platform from outside the Philippines, your personal information may be transferred to and processed in the Philippines in accordance with applicable data privacy laws. 15. Changes to This Policy This Privacy Policy may be updated periodically to reflect changes in Platform features, applicable law, or operational practices. Material changes will be communicated through the Platform, registered email, or other reasonable notification channels before the changes take effect. Continued use of the Platform after changes take effect constitutes acceptance of the updated Privacy Policy. 16. Contact Information For privacy inquiries, data subject requests, or concerns about this Policy, please contact: info@002bookings.com or our social media handles on Facebook or Instagram for general inquiries. Azur Business Atrium, Daro, National Highway, Dumaguete City, Negros Oriental 6200 002Bookings.com — Privacy Policy — June 2026