phphpg Privacy Policy

1. About This Privacy Policy

phphpg ("we," "us," "our," or the "Platform") is committed to protecting the personal data of every player who visits, registers with, or transacts on our platform. This Privacy Policy sets out the basis on which we collect, process, store, and disclose your personal data in the course of providing our online casino and sports betting services.

This policy is written and maintained in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Republic of the Philippines. We are registered with the NPC as a Personal Information Controller (PIC).

Additionally, in our capacity as a PAGCOR-licensed gaming operator, we adhere to the applicable data protection and anti-money laundering data handling obligations imposed by the Philippine Amusement and Gaming Corporation and the Anti-Money Laundering Council (AMLC).

By creating an account with phphpg, depositing funds, placing bets, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this policy, you must not use our platform.

2. Information We Collect

phphpg collects personal data that is necessary for the provision of our services, compliance with legal obligations, and the protection of the platform's integrity. The categories of personal data we collect include, but are not limited to, the following:

2.1 Information You Provide Directly

• Registration Data: Full legal name, date of birth, gender, nationality, and residential address (including city/municipality, province, and ZIP code).
• Contact Information: Email address and Philippine mobile phone number.
• Account Credentials: Username and hashed/encrypted password.
• Identity Verification Documents: Copies of government-issued photo identification (e.g., Philippine passport, driver's license, UMID card, PhilSys ID), proof of address documents, and proof of payment method ownership, as required during our Know Your Customer (KYC) verification process.
• Financial Information: Bank account numbers or mobile wallet identifiers (GCash, Maya) used to process deposits and withdrawals. We do not store full card numbers or banking PINs.
• Communications: Records of your interactions with our customer support team, including chat transcripts, email exchanges, and support tickets.

2.2 Information Collected Automatically

• Device & Technical Data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, unique device identifiers, and mobile network information.
• Usage and Behavioral Data: Pages and features accessed, games played, bets placed, session duration, login timestamps, clickstream data, and in-game activity logs.
• Transaction Data: Full history of deposits, withdrawals, bonuses claimed, and wagering activity, including dates, amounts, and payment methods used.
• Geolocation Data: Approximate location derived from your IP address. We do not collect precise GPS-level location data unless explicitly enabled by you.
• Cookie Data: Data collected via cookies, web beacons, pixel tags, and similar tracking technologies. See Section 6 for details.

2.3 Information from Third Parties

• Payment Providers: Transaction confirmation data from GCash, Maya, BPI, BDO, and other payment processors when you deposit or withdraw funds.
• Identity Verification Services: Results and data from third-party KYC/AML screening providers used to verify your identity and screen against sanctions and watchlists.
• PAGCOR and Regulatory Bodies: Information shared with us by PAGCOR or other Philippine regulatory authorities pursuant to our licensing obligations.
• Fraud Prevention Partners: Risk scores or flags from third-party fraud detection services used to protect the platform from abuse.

3. How We Use Your Personal Data

phphpg processes your personal data for the following specific and legitimate purposes:

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, phphpg processes your personal data on the following legal grounds:

• Performance of Contract: Processing is necessary to fulfill our contractual obligations to you under our Terms & Conditions — primarily to provide the gaming and payment services you have registered for.
• Compliance with Legal Obligations: We are required by Philippine law (AMLA, PAGCOR licensing conditions, NPC registration requirements) to collect and process certain data, including KYC/AML documentation and transaction records.
• Consent: Where required by law (e.g., for direct marketing communications), we will obtain your freely given, specific, and informed consent before processing. You may withdraw consent at any time.
• Legitimate Interests: For purposes such as fraud prevention, platform security, and service improvement, where our legitimate business interests are not overridden by your rights and freedoms as a data subject.

5. Sharing and Disclosure of Your Information

phphpg does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We only share your personal data in the following circumstances, and only to the extent strictly necessary:

5.1 Service Providers and Data Processors

We engage carefully vetted third-party service providers who process data on our behalf under strict contractual agreements that require them to protect your data and prohibit them from using it for any other purpose. These include:

• Payment processing companies (GCash, Maya, and banking partners)
• Identity verification and KYC service providers
• Cloud hosting and data storage providers
• Fraud detection and cybersecurity firms
• Customer support platform providers
• Game software providers licensed by PAGCOR

5.2 Regulatory and Law Enforcement Authorities

As a PAGCOR-licensed operator, phphpg is legally required to disclose certain information to regulatory and law enforcement bodies, including but not limited to:

• PAGCOR — for licensing compliance reporting, audit inspections, and player protection purposes.
• Anti-Money Laundering Council (AMLC) — for covered transaction reports (CTRs) and suspicious transaction reports (STRs) as mandated by the Anti-Money Laundering Act.
• National Privacy Commission (NPC) — in the event of a personal data breach or upon formal inquiry.
• Courts and Law Enforcement Agencies — in response to lawful court orders, subpoenas, or official government requests.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving phphpg, your personal data may be transferred to the succeeding entity. We will notify you of any such transfer and ensure the new entity is bound by privacy obligations equivalent to those described in this policy.

5.4 With Your Consent

In situations not covered above, we will only share your personal data with your explicit and informed consent.

6. Cookies and Tracking Technologies

phphpg uses cookies, web beacons, and similar tracking technologies to enhance your experience, maintain session security, and gather analytics data. By using our platform, you consent to the use of these technologies in accordance with this policy.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of our platform. These enable core features such as user authentication, session management, and security functions. You cannot opt out of these cookies while using our services.
• Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with our platform — which pages are visited most often, how long sessions last, and where users encounter errors. This helps us improve the overall user experience.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options to provide a more personalized experience.
• Marketing / Targeting Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. You may opt out of marketing cookies at any time via your browser settings or our cookie preference center.

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies. Please note that disabling strictly necessary cookies may affect the functionality of the phphpg platform, including your ability to log in and access your account.

7. Data Security Measures

phphpg takes the security of your personal data seriously. We implement a layered set of technical, organizational, and administrative security controls designed to protect your data against unauthorized access, accidental loss, alteration, disclosure, or destruction.

7.1 Technical Safeguards

• Encryption in Transit: All data transmitted between your device and our servers is protected using Transport Layer Security (TLS 1.2 or higher), ensuring your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encryption at Rest: Sensitive data stored in our databases — including identification documents and financial records — is encrypted at rest using industry-standard AES-256 encryption.
• Password Hashing: Account passwords are never stored in plain text. We use bcrypt hashing with appropriate salt rounds to protect your credentials even in the unlikely event of a database compromise.
• Two-Factor Authentication (2FA): We offer 2FA as an optional but strongly recommended security layer for your phphpg account.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and continuously monitored by intrusion detection and prevention systems (IDPS).

7.2 Organizational Safeguards

• Access to your personal data within phphpg is strictly limited on a need-to-know basis, controlled through role-based access management.
• All phphpg employees and contractors who handle personal data are bound by confidentiality obligations and receive regular data privacy training.
• We conduct periodic security assessments, penetration testing, and internal audits to identify and remediate vulnerabilities.

7.3 Data Breach Response

In the unlikely event of a personal data breach that poses a real risk to your rights and freedoms, phphpg will notify the National Privacy Commission (NPC) within seventy-two (72) hours of discovery, as required by the Data Privacy Act. We will also notify affected users without undue delay, providing clear information about the nature of the breach, the data involved, and the steps we are taking to contain and remediate the incident.

8. Data Retention

phphpg retains your personal data only for as long as is necessary to fulfill the purposes described in this Privacy Policy, or for as long as required by applicable law or regulatory obligation. The following retention periods apply:

• Account and KYC Records: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Records: Communications with our support team are retained for two (2) years from the date of the interaction.
• Marketing Data: If you have subscribed to promotional communications, your contact preferences are retained until you unsubscribe or request deletion.
• Cookie and Analytics Data: Aggregated, anonymized analytics data may be retained indefinitely for platform improvement purposes. Individual session data is typically retained for up to twelve (12) months.

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with you.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phphpg:

• Right to be Informed: The right to know what personal data we collect, how it is used, and with whom it is shared — as provided in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data we hold about you, including information about how it has been processed.
• Right to Rectification: The right to have inaccurate or outdated personal data corrected. You can update most of your account information directly from your account settings page.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data, subject to legal retention obligations (see Section 8). Note that regulatory retention requirements may prevent us from fully erasing all data immediately upon request.
• Right to Object: The right to object to certain types of processing, including direct marketing communications. You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to have that data transmitted to another organization where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Privacy Officer at: [email protected]. We will respond to your request within fifteen (15) business days from receipt. In complex cases, we may extend this period by up to an additional thirty (30) days, in which case we will notify you of the extension and the reason for it.

10. Children's Privacy and Age Restriction

phphpg is an online gambling platform strictly intended for adults. Under Philippine law, the minimum legal age for gambling is twenty-one (21) years. We do not knowingly collect, process, or store personal data from individuals under 21 years of age.

Our registration process includes an age declaration step, and all registered accounts are subject to identity verification to confirm age compliance. If we discover that personal data has been provided by or on behalf of an individual under 21 years of age, we will immediately close the account, delete the associated data, and (where required) report the incident to PAGCOR.

Parents and guardians are encouraged to use internet filtering and parental control software to prevent minors from accessing online gambling platforms.

11. Third-Party Links and Embedded Content

The phphpg platform may display links to third-party websites or embed content from third-party providers (such as game software from licensed game developers). This Privacy Policy applies only to data processed by phphpg. We are not responsible for the privacy practices of third-party websites, and we encourage you to review the privacy policies of any third-party sites you visit.

Game providers whose games are available on phphpg may collect certain usage data (e.g., game session data, bet amounts) as part of their game operation. Such data is governed by the game provider's own data processing agreement with phphpg, and they are contractually prohibited from using that data for purposes other than game delivery and integrity monitoring.

12. Updates to This Privacy Policy

phphpg reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our services, business practices, or legal and regulatory requirements. Any material changes to this policy will be communicated to you via a prominent notice on the phphpg website and, where required by the Data Privacy Act, via direct notification to your registered email address.

The "Last Reviewed" date at the top of this document will be updated each time the policy is revised. Your continued use of the phphpg platform following the posting of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised terms, you must stop using the platform and may close your account.

13. Contact Our Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our designated Data Privacy Officer (DPO):

• Email: [email protected]
• Live Chat: Available 24/7 via your phphpg account dashboard
• Response Time: Within fifteen (15) business days for formal data subject requests

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which has jurisdiction over data privacy complaints under the Data Privacy Act of 2012.