philph Privacy Policy

philph ("we", "us", "our", or "the Platform") is committed to safeguarding the privacy and personal data of every individual who uses the philph online gaming platform at philph.org. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable PAGCOR data handling guidelines.

This Privacy Policy applies to all personal data collected through philph.org, the philph mobile application, customer support channels, and any other service operated by philph. By registering for a philph Account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

philph collects personal data through several channels. The categories of data we may collect include:

2.1 Registration & Identity Data

When you create a philph Account, we collect: full legal name, date of birth, residential address (including barangay, city/municipality, province), nationality, email address, and mobile number. For identity verification (KYC), we may also collect a copy of a government-issued Philippine ID such as PhilSys, UMID, passport, driver's licence, or voter's ID.

2.2 Financial Data

To facilitate deposits and withdrawals, philph collects payment-related information including GCash mobile number, Maya account reference, bank account details (for BPI, BDO, Metrobank transfers), and card information (for Visa and Mastercard transactions). Full card numbers are never stored on philph servers; card processing is handled by PCI-DSS certified payment processors.

2.3 Transaction & Gaming Activity Data

philph maintains records of all deposits, withdrawals, bonus claims, game sessions, bet histories, and wagering outcomes associated with your Account. This data is used for account management, dispute resolution, regulatory compliance, and responsible gaming monitoring.

2.4 Technical & Device Data

When you access philph, we automatically collect certain technical data including your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.5 Communications Data

If you contact philph through live chat, email, or any other support channel, we retain records of that communication, including the content of messages and any attachments provided, for quality assurance and dispute resolution purposes.

philph uses collected personal data for the following purposes:

• Account Creation & Management: To register your philph Account, verify your identity, manage your profile, and maintain accurate records.
• Age Verification & Eligibility: To confirm that all registered players meet the 21+ minimum age requirement mandated by PAGCOR regulations for casino-style gaming in the Philippines.
• Transaction Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, Visa, Mastercard, USDT, Coins.ph, and other supported payment methods.
• Legal & Regulatory Compliance: To fulfil philph's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Responsible Gaming: To monitor gaming activity, identify patterns that may indicate problem gambling behaviour, and administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the philph platform.
• Customer Support: To respond to your enquiries, process complaints, and resolve disputes through live chat and email support.
• Platform Improvement: To analyse usage patterns, conduct internal research, and improve the performance, features, and user experience of the philph platform.
• Marketing Communications (with consent): To send promotional offers, bonus notifications, and platform updates via email, SMS, or push notification — only where you have opted in to receive such communications.

Under the Philippine Data Privacy Act of 2012, philph processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and philph — i.e., to provide the gaming platform services you have registered to use.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR directives, AMLA obligations, and KYC/AML requirements.
• Legitimate Interests: Processing is conducted in pursuit of philph's legitimate business interests — including fraud prevention, security monitoring, and platform analytics — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: For optional processing activities such as direct marketing communications, philph relies on your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

philph does not sell or rent your personal data to third parties. We may, however, share your data with the following categories of recipients where strictly necessary:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), BancNet, and other licensed payment service providers require certain data to facilitate transactions on your behalf.
• Identity Verification Providers: Third-party KYC and age verification service providers who assist philph in meeting its regulatory obligations.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government bodies where disclosure is required by law or regulatory directive.
• Technology Service Providers: Cloud hosting, cybersecurity, customer support software, and other technology providers who process data on philph's behalf under strict data processing agreements and confidentiality obligations.
• Legal & Compliance Advisers: Law firms and compliance consultants engaged by philph, subject to professional confidentiality obligations.

All third parties with whom philph shares personal data are contractually required to maintain appropriate technical and organisational safeguards and to use the data solely for the specified purpose. philph remains responsible for ensuring that such third parties handle your data in accordance with applicable privacy law.

The philph platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session security, and gather analytics data. The types of cookies used include:

• Essential Cookies: Strictly necessary for the operation of the philph platform, including authentication session management and security tokens. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, display options, and last-visited game categories to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players navigate and interact with the philph platform. This information is used solely to improve platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and suspicious login patterns that may indicate unauthorised access to your Account.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the philph platform. philph does not use cookies to serve third-party advertising or track your activity on external websites.

philph retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable Philippine law. Specific retention periods include:

• Active Account Data: Retained for the duration of your active relationship with philph and for a period of five (5) years following Account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC & Identity Documents: Retained for the duration of the Account and for five (5) years post-closure, or longer if required by a regulatory investigation or legal proceeding.
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, at which point your marketing preferences are updated immediately.

Upon expiry of the applicable retention period, philph will securely delete or anonymise your personal data in accordance with its internal data disposal procedures.

Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by philph. To exercise any of these rights, contact the philph Data Protection Officer at [email protected].

philph will respond to all verifiable data subject requests within thirty (30) calendar days of receipt. In cases of complexity, this period may be extended by a further thirty (30) days with written notice.

philph implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the philph platform is encrypted in transit.
• Encrypted Data Storage: Sensitive personal and financial data is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised philph personnel on a strict need-to-know basis. All access is logged and subject to regular audit.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their philph Accounts for an additional layer of login security.
• Intrusion Detection & Monitoring: philph employs continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Penetration Testing: The philph platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, philph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay.

The philph platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing casino-style gaming in the Philippines. philph does not knowingly collect personal data from individuals under the age of 21.

If philph becomes aware that personal data has been collected from an individual below the minimum age requirement, the relevant Account will be immediately suspended, all associated data will be reviewed, and the data will be securely deleted where no legal retention obligation applies. Any funds held in such an Account are subject to forfeiture pending investigation.

Parents or guardians who believe a minor has registered on the philph platform are encouraged to contact support immediately via live chat or at [email protected].

The philph platform may contain links to third-party websites, game providers, or payment platforms that are not owned or controlled by philph. This Privacy Policy applies solely to data collected and processed by philph. philph is not responsible for the privacy practices, content, or security of any third-party platforms you may access via links on philph.org.

We encourage you to review the privacy policy of any third-party service you interact with. philph has no ability to control or influence how third-party services collect, store, or use your data.

philph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our internal data processing practices. When material changes are made, philph will notify registered players via email to the address on file or through a prominent in-platform notification at least seven (7) days before the amended policy takes effect.

The most current version of this Privacy Policy will always be published at philph.org/privacy-policy, with the effective date displayed at the top of the document. Continued use of the philph platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by philph, please contact our Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 directly on the philph platform — the fastest way to reach our team for urgent privacy concerns.
• Email: [email protected] — please include "Privacy Request" in the subject line so your enquiry is directed to the DPO promptly.

philph aims to acknowledge all privacy-related communications within two (2) business days and to resolve substantive requests within thirty (30) calendar days of receipt.

If you are not satisfied with philph's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters under Republic Act No. 10173.