phcasino Privacy Policy

1. Overview & Scope

This Privacy Policy ("Policy") describes how phcasino ("phcasino," "we," "us," or "our") collects, processes, stores, and protects the personal data of individuals ("you," "your," or "the Player") who access or use the phcasino platform at phcasino.asia.

This Policy applies to all personal data processed by phcasino in connection with the provision of its online casino services, including account registration, identity verification, payment processing, customer support, marketing communications, and responsible gaming activities. It covers data collected through the phcasino website, mobile applications, live chat, email, and any other channel through which you interact with phcasino.

This Policy should be read alongside phcasino's Terms & Conditions and Responsible Gaming Policy. Where this Policy conflicts with any other phcasino document on matters of data privacy, this Policy shall prevail.

2. Data Controller

phcasino acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes, as defined under the Philippine Data Privacy Act of 2012. As PIC, phcasino determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data privacy laws.

phcasino has appointed a Data Protection Officer (DPO) who is responsible for overseeing phcasino's data protection compliance programme, handling data subject requests, and serving as the primary point of contact for the National Privacy Commission (NPC) of the Philippines. Contact details for phcasino's DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

phcasino collects the following categories of personal data, depending on how you interact with the platform:

phcasino does not collect sensitive personal information (as defined under the DPA, such as health data, religious beliefs, or political affiliations) unless strictly required for responsible gaming purposes — for example, if you voluntarily disclose a gambling-related health concern when requesting self-exclusion.

4. How We Collect Your Data

phcasino collects personal data through the following means:

• Direct collection: Data you provide when registering a phcasino account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access phcasino.asia, including IP address, device identifiers, browser information, and session activity via cookies and similar tracking technologies (see Section 8).
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, Maya, and banking partners in connection with your transactions.
• Publicly available sources: In limited circumstances, phcasino may verify information against publicly available records for fraud prevention or regulatory compliance purposes.

5. Legal Basis for Processing

phcasino processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil phcasino's obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulatory requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where phcasino's legitimate interests are not overridden by your data privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where phcasino relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Personal Data

phcasino uses your personal data for the following purposes:

• Creating and managing your phcasino account, including identity and age verification.
• Processing deposits and withdrawals through your chosen payment method (GCash, Maya, bank transfer, or debit card).
• Providing access to phcasino's games, including slots, bingo, keno, handball betting, and live casino games.
• Detecting and preventing fraud, money laundering, and other prohibited activities on the phcasino platform.
• Complying with PAGCOR regulatory requirements, AMLA reporting obligations, and other applicable Philippine laws.
• Monitoring gaming activity for responsible gaming purposes, including identifying players who may be at risk of problem gambling.
• Providing customer support and resolving disputes or complaints.
• Sending transactional communications (account notifications, security alerts, payment confirmations).
• Sending promotional communications about phcasino offers and bonuses — only where you have provided consent and only until you withdraw that consent.
• Improving the phcasino platform through analytics and user experience research.

7. Data Sharing & Disclosure

phcasino does not sell your personal data to third parties. phcasino may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, and participating Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) — to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist phcasino in verifying your identity and age in compliance with PAGCOR and AMLA requirements.
• Fraud prevention and AML compliance partners: Services that help phcasino detect and prevent fraudulent activity and money laundering.
• Technology and infrastructure providers: Cloud hosting, platform software, and security service providers who process data on phcasino's behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Law enforcement: Philippine law enforcement agencies, where disclosure is required by a valid legal order or where phcasino reasonably believes disclosure is necessary to prevent or investigate criminal activity.

All third-party service providers who process personal data on phcasino's behalf are required to enter into data processing agreements that obligate them to process your data only as instructed by phcasino and in compliance with the Philippine Data Privacy Act.

8. Cookies & Tracking Technologies

phcasino uses cookies and similar tracking technologies on phcasino.asia to enhance your experience, maintain session security, and analyse platform usage. The following types of cookies are used:

• Strictly necessary cookies: Essential for the phcasino platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting your ability to use phcasino.
• Functional cookies: Remember your preferences (such as language settings and responsible gaming limits) to personalise your phcasino experience.
• Analytics cookies: Collect anonymised data about how players use phcasino.asia to help us improve the platform. Used only with your consent.
• Marketing cookies: Track your interaction with phcasino promotions to deliver relevant offers. Used only with your consent.

You can manage your cookie preferences through the phcasino cookie settings panel, accessible from the footer of phcasino.asia. You may also control cookies through your browser settings, though disabling strictly necessary cookies may impair your ability to use phcasino.

9. Data Retention

phcasino retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, in accordance with PAGCOR regulatory requirements and AMLA obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Gaming activity records: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory reporting purposes.
• Customer support records: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records: Retained for the duration of your consent and for two (2) years thereafter, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, phcasino will securely delete or anonymise your personal data in accordance with its data disposal procedures.

10. Security Measures

phcasino implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and phcasino.asia is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access controls: Access to personal data within phcasino is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo data privacy training.
• Two-factor authentication (2FA): phcasino supports and encourages the use of 2FA for player accounts to provide an additional layer of security.
• Penetration testing: phcasino's platform undergoes regular security assessments and penetration testing by independent security professionals.
• Incident response: phcasino maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, phcasino will notify the National Privacy Commission and affected players within the timeframes required by the Data Privacy Act.

11. Your Privacy Rights Under the DPA

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phcasino:

12. Minors & Age Policy

phcasino's services are strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. phcasino does not knowingly collect personal data from individuals under the age of 21.

phcasino employs mandatory age verification procedures as part of its KYC process. Any account found to belong to an individual under 21 years of age will be immediately suspended, all funds will be returned (less any bonuses), and the account will be permanently closed. If you believe a minor has registered a phcasino account, please contact our support team immediately at [email protected].

13. International Data Transfers

phcasino primarily processes personal data within the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud screening services.

Where personal data is transferred outside the Philippines, phcasino ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require the recipient to process your data in accordance with standards equivalent to those required by the Philippine Data Privacy Act. phcasino will not transfer your personal data to countries that do not provide an adequate level of data protection without implementing appropriate safeguards.

14. Changes to This Privacy Policy

phcasino reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Policy will always be available at phcasino.asia/privacy-policy, with the effective date displayed at the top of the page.

For material changes to this Policy, phcasino will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect. Your continued use of phcasino after the effective date of any amendment constitutes your acknowledgement of the updated Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how phcasino protects your personal data.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or phcasino's data processing practices, please contact our Data Protection Officer:

If you are not satisfied with phcasino's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through its official website and complaint channels.