phcasino Privacy Policy

This Privacy Policy ("Policy") describes how phcasino ("phcasino", "we", "us", or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", or "player") who access or use the phcasino online gaming platform, including the website at https://phcasino.one, any associated mobile applications, and all related services (collectively, the "Platform").

This Policy is issued in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). phcasino is committed to upholding the data privacy rights of all Filipino players and ensuring that personal information is processed lawfully, fairly, and transparently.

By registering for a phcasino account, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the phcasino Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, phcasino is the Personal Information Controller in respect of the personal data collected through the Platform. This means phcasino determines the purposes and means of processing your personal information.

phcasino operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR). As a regulated gaming operator, phcasino is subject to data handling obligations imposed by both the NPC and PAGCOR, and processes certain personal data as required by those regulatory bodies.

If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 16 of this Policy.

phcasino collects the following categories of personal information, depending on how you interact with the Platform:

phcasino collects personal data through the following means:

• Directly from you: When you register for an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
• Automatically: When you access and use the Platform, our systems automatically collect technical data such as your IP address, device identifiers, browser information, and session activity logs. This data is collected through cookies, web beacons, and similar tracking technologies (see Section 8).
• From third-party verification providers: phcasino works with accredited KYC and identity verification service providers to validate the identity documents you submit. These providers may return verification results and risk scores to phcasino.
• From payment processors: When you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, or Metrobank, our payment processing partners share transaction confirmation data with phcasino to facilitate the crediting or debiting of your account.
• From fraud prevention services: phcasino uses third-party fraud detection tools that may provide risk assessments based on technical data associated with your account activity.

phcasino uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your phcasino account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To provide you with access to phcasino games, process your deposits and withdrawals, credit bonuses and promotions to your account, and deliver customer support services.
• Regulatory Compliance: To comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA) of the Philippines, the Data Privacy Act of 2012, and other applicable Philippine laws and regulations. This includes conducting KYC verification, filing regulatory reports, and responding to lawful requests from government authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the Platform. phcasino uses automated systems and manual review processes for this purpose.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to administer responsible gaming tools (such as deposit limits, cooling-off periods, and self-exclusion), and to fulfil our duty of care obligations to players.
• Marketing Communications: Where you have opted in to receive marketing communications, to send you information about phcasino promotions, new games, and special offers. You may opt out of marketing communications at any time through your account settings or by contacting support.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the phcasino Platform.
• Legal Claims: To establish, exercise, or defend legal claims in connection with the phcasino Platform or these Terms.

Under the Data Privacy Act of 2012, phcasino processes your personal data on the following lawful bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or the processing of sensitive personal information during KYC verification.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and phcasino — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to phcasino, including PAGCOR regulatory requirements, AMLA obligations, and NPC data protection requirements.
• Legitimate Interests: Where processing is necessary for the legitimate interests of phcasino, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and improving our services.

Where phcasino relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

phcasino does not sell your personal data. We may share your personal information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: Accredited third-party providers who assist phcasino in verifying the identity documents you submit during the KYC process.
• Fraud Prevention & Security Providers: Third-party services that assist phcasino in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulation.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by phcasino, subject to professional confidentiality obligations.
• IT & Infrastructure Providers: Cloud hosting, data storage, and IT service providers who process data on phcasino's behalf under strict data processing agreements.

phcasino uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The following types of cookies are used on the phcasino Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players use the Platform — such as which pages are visited most frequently and how long sessions last. This data helps phcasino improve the Platform experience.
• Functional Cookies: These cookies remember your preferences, such as your language settings and responsible gaming configurations, to provide a more personalised experience.
• Marketing Cookies: Where you have consented, these cookies track your activity on the Platform to enable phcasino to deliver relevant promotional content. You may withdraw consent for marketing cookies at any time through your browser settings or account preferences.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phcasino Platform. For detailed information about the specific cookies used, please contact our support team.

phcasino retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and regulation:

• Account & Identity Data: Retained for a minimum of 5 years from the date of account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in compliance with AMLA requirements.
• KYC Verification Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Gaming Activity Records: Retained for a minimum of 3 years from the date of each gaming session, for regulatory audit and dispute resolution purposes.
• Support Communications: Retained for a minimum of 2 years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, phcasino will securely delete or anonymise your personal data in accordance with our data disposal procedures. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical and analytical purposes.

phcasino implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the phcasino Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using phcasino.
• Encryption at Rest: Sensitive personal data stored on phcasino servers, including financial data and identity documents, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to phcasino personnel and authorised third parties who have a legitimate need to access it. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Regular Security Audits: phcasino conducts regular security assessments, penetration testing, and vulnerability scans to identify and remediate potential security weaknesses.
• Incident Response: phcasino maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, phcasino will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by phcasino:

To exercise any of the above rights, please contact phcasino's Data Protection Officer using the contact details in Section 16. phcasino will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, and you will be notified of any such extension.

Please note that certain rights are subject to limitations under Philippine law. For example, the right to erasure does not apply where phcasino is required to retain your data to comply with a legal obligation, such as AMLA record-keeping requirements.

The phcasino Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law governing online gaming. phcasino does not knowingly collect personal data from individuals under the age of 21.

If phcasino discovers or has reason to believe that personal data has been collected from a person under 21 years of age, the following actions will be taken immediately:

• The account will be permanently closed without prior notice.
• All funds in the account, including deposits and winnings, will be forfeited in accordance with PAGCOR regulatory requirements.
• All personal data associated with the account will be securely deleted, except where retention is required by law.
• The matter may be reported to the relevant Philippine authorities.

phcasino employs age verification technology and manual review processes as part of our KYC procedures to prevent underage access to the Platform. All players are required to submit government-issued identification confirming their date of birth before their account is fully activated.

phcasino primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, KYC verification services, and fraud prevention tools — may process data in other countries.

Where personal data is transferred outside the Philippines, phcasino ensures that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries or organisations that provide an adequate level of data protection as recognised by the National Privacy Commission.
• Implementing contractual data protection clauses in agreements with international service providers that impose obligations equivalent to those under Philippine law.
• Conducting due diligence on international service providers to verify their data security practices before engaging their services.

By using the phcasino Platform, you acknowledge and consent to the transfer of your personal data to other countries where our service providers operate, subject to the safeguards described above.

The phcasino Platform may contain links to third-party websites or services. This Privacy Policy applies only to the phcasino Platform and does not cover the data practices of any third-party websites or services that you may access through links on our Platform.

phcasino is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party websites you visit before providing them with your personal information.

phcasino reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made to this Policy, phcasino will notify registered players by email or through a prominent notice on the Platform at least 7 days before the changes take effect, where practicable.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how phcasino protects your personal information. Your continued use of the phcasino Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phcasino, please contact our Data Protection Officer:

• Data Protection Officer: phcasino DPO
• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 through the phcasino Platform in English and Filipino.

phcasino will acknowledge all privacy-related enquiries within 3 Philippine business days and will provide a substantive response within 30 calendar days.

If you are not satisfied with phcasino's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.