A post promises game currency, a tournament prize or a new phone, then asks Filipino participants to upload an ID, selfie, address, birthday and mobile number. A familiar game logo does not make that request official, and a public comment or private chat is not automatically a safe place for identity documents.
Why an ID photo creates lasting risk
An ID can combine a full name, birth date, address, photograph, signature and unique number in one reusable image. A selfie beside it can strengthen an impersonation attempt. Unlike a password, those details are difficult or impossible to replace after they are copied.
The Philippines National Privacy Commission warns that photos and videos containing personal data can be exploited for identity theft, fraud, harassment or stalking. Its guidance on photographing identification documents also highlights the need for appropriate safeguards and a privacy notice.
Giveaways should collect only what they need
The NPC’s guidance for online raffles urges organizers to use less privacy-intrusive mechanics and warns participants to think twice when a contest asks for excessive information or requires public posting. A legitimate organizer may need limited details to contact or validate a winner, but that does not justify collecting every participant’s government ID in a public thread.
Ask these questions before participating:
- Is the giveaway announced on the publisher’s verified website, in-game news or linked official social account?
- Is there a clear organizer name, eligibility rule, closing date and prize description?
- Does the privacy notice explain the purpose, retention period, recipients and contact point?
- Can the organizer verify a winner with less data or only after selection?
- Is the upload destination an official domain rather than a shortened link or personal chat?
Red flags that mean leave
- You must post an ID, selfie, address or phone number where other users can see it.
- A supposed moderator asks for a password, one-time code, recovery code or screen-sharing session.
- The prize requires a processing fee, wallet transfer or purchase of a special activation code.
- The link imitates the game site but uses a misspelled or unrelated domain.
- You are pressured to act immediately or keep the request secret.
- An Android file, configuration profile or certificate must be installed to claim the prize.
NPC guidance describes phishing as using messages and fake sites to extract personal information. Do not rely on the sender name alone; open the publisher’s known official site separately and look for the same announcement.
If age verification is genuinely required
Do not improvise by sending a full ID image to a community volunteer. Use only the publisher’s documented official process, and check whether a parent or guardian must handle a minor’s information. Covering fields on your own may invalidate a legitimate check, while sending everything may expose unnecessary data, so obtain the organizer’s written instructions first.
A real request should explain who controls the data, why it is necessary, how it is protected and how long it is kept. If those answers are absent, skipping the giveaway is safer than trying to negotiate in direct messages.
If you already sent the data
- Save the post, account name, messages, URL, date and files requested as evidence.
- Delete a public post if you control it, but assume copies may already exist.
- Change any reused password and secure the connected email and game account.
- Watch for password resets, wallet messages, new SIM or account alerts and impersonation attempts.
- Report the account and link through the platform and the game publisher’s official channel.
- If personal data appears misused, review the NPC’s official complaint route.
Do not send a second ID or payment to someone claiming they can erase the first copy. Keep evidence outside the chat in case the account disappears.
A safer way to join
Use a non-public contact method supplied on the verified official page, provide only the fields required by the published mechanics, and avoid including passwords or authentication codes. Keep the confirmation and rules until the promotion closes.
For ordinary game account protection, follow WP Phone’s account security guide. If the supposed prize asks you to install an app, use the Philippines Android installation checklist and stop at any unofficial APK.
Editorial review: 8 September 2026. This is practical privacy guidance, not a determination that a specific promotion is lawful or fraudulent.