1. Introduction
At PHPhil, we take the privacy of our players seriously — because you deserve to know exactly how your information is being handled when you sign up, deposit, play, and withdraw. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a data subject under Philippine law.
This policy applies to all personal information you provide to PHPhil through our website, mobile platform, customer support channels, and any related services. By creating an account or continuing to use PHPhil, you acknowledge that you have read and understood this Privacy Policy.
PHPhil is committed to complying with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as well as the issuances of the National Privacy Commission (NPC) of the Philippines.
Quick Summary: PHPhil collects only what it needs to run your account and keep you safe. We never sell your data. You can request access, correction, or deletion anytime by contacting our Data Protection Officer.
2. What Personal Data We Collect
PHPhil collects the following categories of personal data depending on how you interact with our platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government ID number | Account verification, KYC compliance |
| Contact Data | Mobile number, email address, home address | Account communication, verification, support |
| Financial Data | GCash/Maya account reference, bank account details (partial), transaction history | Processing deposits and withdrawals |
| Technical Data | IP address, device type, browser type, operating system, login timestamps | Security monitoring, fraud prevention |
| Usage Data | Pages visited, games played, session duration, bet history | Platform improvement, responsible gaming monitoring |
| Communication Data | Support chat logs, email correspondence | Dispute resolution, service quality |
We do not collect sensitive personal information such as health data, political opinions, or biometric data unless strictly required by law or regulatory authorities.
3. How We Collect Your Data
PHPhil collects personal data through the following methods:
- Direct collection: Information you provide when registering, completing KYC, depositing funds, or contacting support.
- Automated collection: Technical data gathered automatically through cookies, web beacons, and server logs when you visit or use the PHPhil platform.
- Third-party sources: Identity verification and AML screening services, payment processors (e.g., GCash, Maya, BDO), and fraud prevention partners may share limited data with us as necessary.
4. How We Use Your Personal Data
PHPhil processes your personal data for the following lawful purposes:
- Account management: Creating, maintaining, and verifying your PHPhil account.
- Transaction processing: Handling deposits, withdrawals, and bonus crediting in Philippine Peso (₱).
- Legal compliance: Meeting obligations under the DPA, Anti-Money Laundering Act, and Philippine gaming regulations.
- Security and fraud prevention: Detecting and preventing unauthorised access, cheating, collusion, and financial crime.
- Customer support: Responding to your queries, complaints, and requests.
- Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling and enforce self-exclusion requests.
- Marketing communications: Sending you promotions, game updates, and offers — only if you have given your consent and have not opted out.
- Platform improvement: Analysing usage data in aggregated, anonymised form to improve PHPhil's products and services.
We only process your data for the specific purposes stated above. We do not use your information for automated decision-making that significantly affects you without human oversight.
5. Data Sharing and Disclosure
PHPhil will never sell, rent, or trade your personal information to any third party for commercial purposes. We may share limited personal data only in the following circumstances:
5.1 Service Providers
We work with trusted third-party service providers who assist us in operating PHPhil, including payment processors (GCash, Maya, GrabPay, BDO, BPI, UnionBank), identity verification services, IT infrastructure providers, and cybersecurity firms. These providers are contractually bound to handle your data only for the specific services they provide to us and in accordance with the DPA.
5.2 Legal and Regulatory Obligations
PHPhil may disclose your personal data when required to do so by law, court order, or a competent Philippine regulatory authority — including but not limited to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission. We will notify you of any such disclosure to the extent permitted by law.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of PHPhil's business assets, your personal data may be transferred as part of that transaction. You will be notified in advance of any change in data controller and your rights to object.
6. How Long We Keep Your Data
PHPhil retains personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by Philippine law. General retention periods are as follows:
- Active account data: Retained for the duration of your account with PHPhil.
- Closed account data: Retained for a minimum of five (5) years after account closure, in compliance with AML regulations and Philippine gaming licensing requirements.
- Transaction records: Retained for at least five (5) years from the date of the transaction.
- KYC and identity documents: Retained for the duration of the account and up to five (5) years after closure.
- Support communications: Retained for up to three (3) years for dispute resolution and quality assurance.
Once retention periods expire, data is securely deleted or anonymised.
7. How We Protect Your Data
PHPhil uses a combination of technical, administrative, and physical safeguards to protect your personal information from unauthorised access, loss, misuse, or alteration:
- 256-bit SSL/TLS encryption on all data transmissions between your device and our servers.
- Data encryption at rest for sensitive information stored in our databases.
- Strict role-based access control — only personnel who need your data to do their job can access it.
- Regular security audits and penetration testing by independent cybersecurity professionals.
- Multi-factor authentication (MFA) for internal systems accessing player data.
- Incident response protocols in place to detect, contain, and report data breaches to the NPC within 72 hours as required.
While we do our best to protect your data, no system is 100% impenetrable. You also play a role in keeping your account secure — never share your password, and always log out when using shared devices.
8. Your Rights as a Data Subject
Under the Data Privacy Act of 2012, you have the following rights regarding your personal information held by PHPhil:
Right to Be Informed
Know what data we collect, why, and how it is used — which is exactly what this policy is for.
Right of Access
Request a copy of the personal data we hold about you at any time.
Right to Correction
Ask us to correct inaccurate or incomplete personal information on your account.
Right to Erasure
Request deletion of your personal data, subject to our legal retention obligations.
Right to Object
Object to the processing of your data for direct marketing or other non-essential purposes.
Right to Data Portability
Receive a copy of your data in a structured, machine-readable format where technically feasible.
Right to File a Complaint
Lodge a complaint with the National Privacy Commission if you believe your rights have been violated.
Right to Damages
Seek compensation for damages sustained due to inaccurate, incomplete, or unlawfully processed data.
To exercise any of these rights, contact our Data Protection Officer at privacy@phphil.com. We will respond to verified requests within fifteen (15) business days.
9. Cookies and Tracking Technologies
PHPhil uses cookies and similar tracking technologies to improve your experience on our platform. Here's what you need to know:
9.1 Types of Cookies We Use
- Essential cookies: Required for the platform to function — these include session authentication and security tokens. You cannot opt out of these.
- Analytics cookies: Help us understand how players use PHPhil so we can improve the platform. Data is aggregated and anonymised.
- Preference cookies: Remember your settings, such as language and display preferences.
- Marketing cookies: Used to show you relevant promotions. You can opt out of these at any time.
9.2 Managing Cookies
Most modern browsers allow you to control cookie settings. You can choose to block or delete cookies through your browser settings, though doing so may affect the functionality of certain parts of the PHPhil platform. For more information, refer to your browser's help documentation.
10. Children and Minors
PHPhil strictly does not allow individuals under the age of 21 to register or use our platform. We do not knowingly collect personal information from minors. If we discover that a minor has provided us with personal data, we will immediately close their account and delete all associated information.
If you believe a minor has created an account on PHPhil, please contact us immediately at support@phphil.com and we will act on it right away.
11. Cross-Border Data Transfers
In some cases, PHPhil may transfer your personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or international payment networks. When this occurs, we ensure that:
- The receiving country or organisation provides a comparable level of data protection.
- Appropriate contractual safeguards (such as data processing agreements) are in place.
- The transfer is compliant with NPC guidelines on cross-border data flows.
We will not transfer your personal data internationally where adequate protections cannot be guaranteed.
12. Changes to This Privacy Policy
PHPhil may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will notify you via email or a prominent notice on the website prior to the changes taking effect.
The "Last Updated" date at the top of this page indicates the most recent revision. We encourage you to review this policy periodically to stay informed about how we protect your privacy.
13. Contact Our Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you can reach our designated Data Protection Officer (DPO) through the following channels:
- Email: privacy@phphil.com
- General Support: support@phphil.com
- Live Chat: Available 24/7 from your PHPhil account dashboard
- FAQ: Visit our FAQ page for quick answers
You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Visit the NPC's official website for information on how to file a complaint.
Your trust is important to us. PHPhil is committed to transparency and will always handle your data with the care it deserves. If you have any concerns, don't hesitate to reach out — we're here to help.