phpg Casino – Privacy Policy

1.1 For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for your personal information is phpg, the operator of the online gaming platform accessible at phpg.lat (the "Platform").

1.2 phpg has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data protection laws and for handling data subject requests. You may contact the DPO using the contact details set out in Section 13 of this Policy.

1.3 phpg is registered with the National Privacy Commission (NPC) of the Philippines as required under the Data Privacy Act. phpg maintains a Personal Data Processing System (PDPS) documentation in accordance with NPC requirements.

2.1 Registration Data

When you create a phpg account, phpg collects the following personal information that you provide directly:

• Full legal name (as it appears on your Philippine government-issued ID);
• Date of birth;
• Philippine residential address;
• Active email address;
• Active Philippine mobile number;
• Username and password (stored in encrypted form);
• Gender (optional, collected to personalize your experience).

2.2 Identity Verification (KYC) Data

For the purpose of complying with PAGCOR requirements and Philippine anti-money laundering law, phpg collects the following identity verification documents:

• A copy of at least one valid Philippine government-issued photo identification document (e.g., UMID, SSS ID, PhilHealth ID, Passport, Driver's License, Voter's ID);
• Where required for enhanced due diligence: proof of address documents (e.g., utility bill, bank statement, barangay certificate dated within 3 months).

2.3 Financial Transaction Data

phpg collects data relating to deposits, withdrawals, and in-Platform transactions, including:

• Payment method details (GCash number, PayMaya account, bank account number, Visa/Mastercard last four digits);
• Transaction amounts and timestamps;
• Transaction reference numbers;
• Deposit and withdrawal history.

2.4 Gaming Activity Data

phpg automatically records data about your gaming activity on the Platform, including game sessions played, wager amounts, results, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, dispute resolution, and RNG audit compliance.

2.5 Technical and Device Data

phpg automatically collects certain technical data when you access the Platform:

2.6 Communications Data

When you contact phpg's customer support team — whether via live chat, email, or any other channel — phpg retains records of those communications, including the content of messages, support ticket identifiers, and timestamps. These records are retained for quality assurance, training, and dispute resolution purposes.

phpg uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your phpg account; verifying your identity; processing deposits and withdrawals; responding to your customer support enquiries.
• Regulatory Compliance: Fulfilling phpg's obligations under PAGCOR regulations, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), and the Data Privacy Act (Republic Act No. 10173). This includes age verification (21+ requirement), KYC checks, and suspicious transaction reporting to the AMLC where legally required.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activities. phpg uses automated systems and manual review processes for this purpose.
• Responsible Gaming: Monitoring gaming behaviour to identify patterns consistent with problem gambling; operating deposit limits, session limits, cooling-off periods, and self-exclusion tools; proactively reaching out to players who may need support.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game library curation, mobile user experience, and payment processing efficiency.
• Marketing Communications (with consent): Sending you information about phpg bonuses, new game releases, promotions, and VIP program updates via email or SMS — but only where you have given your express prior consent to receive such communications.
• Legal and Dispute Resolution: Establishing, exercising, or defending legal claims; complying with court orders or regulatory directives from Philippine authorities.

4.1 phpg processes your personal data on the following legal bases as provided under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary for the performance of your phpg account agreement — including account creation, identity verification, payment processing, and game delivery.
• Legal Obligation: Processing required for phpg to comply with applicable Philippine laws and regulations, including PAGCOR requirements, the Anti-Money Laundering Act, and the Data Privacy Act.
• Legitimate Interests: Processing necessary for phpg's legitimate interests, including fraud detection, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, which applies specifically to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.1 What phpg Uses Cookies For

phpg uses cookies — small text files placed on your device by your browser — and similar tracking technologies for the following purposes:

• Essential Cookies: Required for the Platform to function. These include session authentication tokens that keep you logged into your phpg account and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your preferences (such as language settings, game category selections, and display preferences) to personalize your phpg experience.
• Analytics Cookies: Help phpg understand how players use the Platform — which pages are visited, how long sessions last, and where errors occur — using aggregated, anonymised data. This information is used solely to improve Platform performance.
• Security Cookies: Assist in detecting fraudulent activity, bot access, and account takeover attempts.

5.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to view, block, or delete cookies. Please note that disabling essential cookies will prevent you from logging into your phpg account and using the Platform. phpg does not use third-party advertising cookies or serve behavioural advertising based on your phpg activity to external advertising networks.

6.1 phpg does not sell, rent, or otherwise transfer your personal information to third parties for their own commercial or marketing purposes.

6.2 phpg shares your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

6.3 All third parties with whom phpg shares personal data are contractually bound to process that data only for the specific purpose for which it was shared and to maintain security standards consistent with phpg's obligations under the Data Privacy Act.

7.1 phpg retains your personal data for as long as your phpg account is active, and for a defined period after account closure, as follows:

• Account and KYC Data: Retained for a minimum of 5 years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act's record retention obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, as required by Philippine AML regulations.
• Gaming Activity Logs: Retained for 3 years following account closure or the date of the gaming session, whichever is later.
• Customer Support Communications: Retained for 2 years from the date of the communication.
• Marketing Consent Records: Retained for 3 years from the date of consent or withdrawal of consent, whichever is later.

7.2 After the applicable retention period expires, phpg will securely delete or anonymise your personal data unless a longer retention period is required or permitted by Philippine law.

8.1 phpg implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and phpg's servers is encrypted. This applies to all pages of the Platform including login, deposit, withdrawal, and account settings pages.
• Encryption at Rest: Sensitive data including passwords (stored as hashed values using bcrypt), identity document images, and payment method details are encrypted in phpg's databases.
• Access Controls: phpg employees are granted access to personal data on a strict need-to-know basis. All access to production data systems is logged and audited.
• Two-Factor Authentication (2FA): phpg offers 2FA to all account holders and requires it for internal staff with access to personal data systems.
• Penetration Testing and Vulnerability Scanning: phpg conducts regular security assessments of its Platform infrastructure.
• Data Breach Response: phpg maintains a data breach response plan. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phpg will notify the NPC within 72 hours of becoming aware of the breach and will notify affected data subjects without undue delay.

8.2 Despite these measures, no security system is completely impenetrable. phpg cannot guarantee absolute security against all threats. You are responsible for maintaining the security of your phpg account credentials and for immediately reporting any suspected unauthorized access to your account.

9.1 Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phpg:

• Right to be Informed: The right to be informed that your personal data is being processed, the extent of processing, and the purpose.
• Right to Access: The right to obtain a copy of your personal data held by phpg and information about how it is processed.
• Right to Correction: The right to request that inaccurate or incomplete personal data be corrected.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to phpg's legal retention obligations described in Section 7.
• Right to Object: The right to object to phpg's processing of your personal data based on legitimate interests, and the right to opt out of direct marketing communications at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Damages: The right to claim compensation for damages sustained as a result of any inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phpg has violated your data privacy rights.

9.2 To exercise any of the rights listed above, please submit a written request to phpg's Data Protection Officer using the contact details in Section 13. phpg will respond to valid data subject requests within 15 business days.

10.1 The phpg Platform is strictly prohibited for persons under the age of 21, in accordance with PAGCOR regulations governing online gaming in the Philippines. phpg does not knowingly collect personal data from any person under 21 years of age.

10.2 phpg implements age verification checks during registration and KYC processing specifically to prevent underage access to the Platform. If you are the parent or guardian of a minor and believe they have created a phpg account, please contact phpg immediately at the address in Section 13.

11.1 phpg's primary data processing occurs within the Philippines. However, certain third-party service providers with whom phpg works — including international game content providers and fraud prevention technology providers — may process data in jurisdictions outside the Philippines.

11.2 Where personal data is transferred outside the Philippines, phpg ensures that adequate protections are in place, including:

• Contractual clauses in agreements with third-party processors that impose data protection obligations equivalent to those applicable in the Philippines;
• Transferring data only to jurisdictions that provide an adequate level of protection as determined by the NPC; and
• Obtaining your consent for transfers where required by the Data Privacy Act.

11.3 phpg will not transfer your personal data to a jurisdiction with inadequate data protection standards without your explicit consent or a lawful basis for doing so under the Data Privacy Act.

12.1 phpg reserves the right to update or modify this Privacy Policy at any time. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

12.2 For material changes — those that significantly affect how phpg collects or uses your personal data, or that affect your data subject rights — phpg will provide advance notice via the email address registered to your phpg account, or by a prominent notice displayed upon your next login to the Platform. phpg will provide at least 14 days' notice before material changes take effect.

12.3 Your continued use of the phpg Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated Policy. phpg recommends checking this page periodically to stay informed of any changes.

13.1 phpg's Data Protection Officer (DPO) is responsible for all matters relating to this Privacy Policy, including handling data subject rights requests, data breach notifications, and privacy compliance enquiries.

13.2 If you have any questions, concerns, or complaints regarding this Privacy Policy or the way phpg handles your personal data, please contact phpg using the following details:

13.3 If you are not satisfied with phpg's response to your data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act.