phphpg Privacy Policy

1. Who We Are

phphpg ("phphpg," "we," "us," or "our") operates the online gaming platform accessible at phphpg.com, providing slots, live casino, sports betting, bingo, and other gaming services to Filipino players. phphpg acts as the data controller in respect of the personal information collected through the Platform.

This Privacy Policy applies to all users of the phphpg Platform, including registered players, visitors, and any other individuals whose personal data is processed by phphpg in connection with the Platform. By using the phphpg Platform, you acknowledge that you have read and understood this Privacy Policy.

phphpg has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations. Contact details for our DPO are provided in Section 14 of this Policy.

2. Personal Data We Collect

phphpg collects the following categories of personal data from players and Platform users:

phphpg does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly required for identity verification and regulatory compliance purposes.

3. How We Collect Your Data

phphpg collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from government databases or third-party KYC providers; fraud prevention data from anti-fraud service providers; payment data from GCash, PayMaya, and banking partners.
• Publicly available sources: Information from public records where relevant to fraud prevention or regulatory compliance.

4. How We Use Your Data

phphpg uses your personal data for the following purposes:

• Account management: Creating and maintaining your phphpg account, verifying your identity and age (21+ requirement), and managing your account settings.
• Platform operation: Processing deposits and withdrawals, recording game activity, awarding bonuses, and resolving disputes.
• Legal and regulatory compliance: Meeting obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and administering self-exclusion and limit-setting tools.
• Customer support: Responding to your inquiries, resolving complaints, and improving our support services.
• Marketing communications: Sending you promotional offers, bonuses, and platform updates — only where you have provided consent or where permitted by law. You may opt out at any time.
• Platform improvement: Analyzing usage patterns to improve the phphpg Platform, develop new features, and enhance the overall player experience.

5. Legal Basis for Processing

phphpg processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including operating your account and processing transactions.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements and AMLC reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

phphpg does not sell your personal data. We may share your personal information with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment partners, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers engaged to verify player identities in compliance with regulatory requirements.
• Fraud prevention services: Anti-fraud and risk management service providers who assist phphpg in detecting and preventing fraudulent activity on the Platform.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulatory obligation.
• IT and platform service providers: Cloud hosting, data analytics, and customer support technology providers engaged by phphpg to operate the Platform, subject to strict data processing agreements.
• Legal and professional advisors: Lawyers, auditors, and other professional advisors engaged by phphpg, subject to professional confidentiality obligations.

All third parties with whom phphpg shares personal data are required to handle such data in accordance with applicable data protection laws and phphpg's data processing standards.

7. Cookies & Tracking Technologies

phphpg uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Essential cookies: Strictly necessary for the Platform to function, including session management and security cookies. These cannot be disabled.
• Functional cookies: Remember your preferences and settings to provide a more personalized experience on the phphpg Platform.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phphpg Platform.

8. Data Retention

phphpg retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Support communications: Retained for two (2) years from the date of the communication, unless a longer period is required for dispute resolution.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications.

When personal data is no longer required, phphpg will securely delete or anonymize it in accordance with our data retention and disposal procedures.

9. Data Security

phphpg implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the phphpg Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phphpg will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phphpg:

• Right to be Informed: You have the right to know what personal data phphpg collects about you and how it is used.
• Right to Access: You may request a copy of the personal data phphpg holds about you at any time.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within fifteen (15) business days. We may need to verify your identity before processing your request.

11. Children's Privacy

The phphpg Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. phphpg does not knowingly collect personal data from individuals under the age of 21.

If phphpg becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the phphpg Platform, please contact us immediately at [email protected].

12. Cross-Border Data Transfers

phphpg primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud prevention services.

Where such transfers occur, phphpg ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law. phphpg will not transfer your personal data to countries that do not provide an adequate level of data protection without implementing appropriate safeguards.

13. Changes to This Privacy Policy

phphpg reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. The date of the most recent revision will be indicated at the top of this page.

Where changes are material, phphpg will provide reasonable advance notice via email or a prominent notice on the Platform. Your continued use of the phphpg Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how phphpg protects your personal data.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phphpg, please contact our Data Protection Officer:

• Data Protection Officer: phphpg Data Privacy Team
• Email: [email protected]
• Responsible Gaming: [email protected]
• Response Time: Within fifteen (15) business days of receipt

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.