phgames Privacy Policy

1. Introduction

phgames ("phgames," "we," "us") operates the online gaming platform accessible at phgames.biz. This Privacy Policy ("Policy") describes how phgames collects, processes, stores, and protects personal data relating to registered players, prospective players, and visitors to the phgames platform ("you," "your," "Data Subject").

phgames is committed to protecting your privacy in compliance with the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. This Policy forms part of the phgames Terms & Conditions and should be read alongside that document.

By accessing phgames, registering an account, or using any of our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

phgames collects the following categories of personal data:

2.1 Registration & Identity Data. Full legal name; date of birth; nationality; residential address (including barangay, city/municipality, province); email address; Philippine mobile number (Globe, Smart, DITO); gender; and government-issued identification documents submitted for KYC (e.g., Philippine passport, driver's licence, SSS card, PhilHealth ID, UMID, postal ID).

2.2 Financial Data. GCash account number and registered mobile number; PayMaya account details; bank account details (BDO, BPI, Metrobank, or other accepted banks); transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers; and source-of-funds declarations where required by PAGCOR or anti-money laundering regulations.

2.3 Gaming Activity Data. Game session records including games played, bets placed, outcomes, session start and end times, and account balance movements. This data is used for dispute resolution, responsible gaming monitoring, and regulatory reporting.

2.4 Technical & Device Data. IP address; device type and model; operating system and version; browser type and version; mobile network operator; session timestamps; and platform access logs.

2.5 Communications Data. Records of correspondence between you and phgames via live chat, email, or support ticket — including the content of messages, timestamps, and resolution notes.

2.6 Responsible Gaming Data. Self-imposed deposit limits, session timers, cooling-off periods, and self-exclusion requests. This data is treated with the highest level of sensitivity and is used solely for the purpose of player protection.

3. How We Collect Your Data

phgames collects personal data through the following means:

• Direct submission: Information you provide when creating a phgames account, completing KYC, making a deposit or withdrawal, or contacting support;
• Automated collection: Technical data collected automatically through platform logs, cookies, and similar tracking technologies when you access phgames;
• Third-party verification: Identity and age verification data returned by KYC service providers when verifying documents you submit;
• Payment providers: Transaction confirmation data from GCash, PayMaya, and banking partners to reconcile deposits and withdrawals.

4. How We Use Your Personal Data

phgames processes personal data for the following purposes:

• Account management: Creating, maintaining, and securing your phgames player account;
• Identity verification: Confirming that you are aged 21 or above and meet eligibility requirements under PAGCOR regulations;
• Payment processing: Facilitating deposits and processing withdrawal requests to your verified Philippine payment method;
• Platform delivery: Providing access to games, live casino streams, bingo rooms, roulette, and all other phgames Services;
• Responsible gaming: Monitoring gaming activity to identify patterns consistent with problem gambling and applying player-requested protections such as deposit limits and self-exclusion;
• Regulatory compliance: Fulfilling obligations under PAGCOR licensing requirements, anti-money laundering (AML) rules, and the Data Privacy Act of 2012;
• Fraud prevention: Detecting and investigating suspicious account activity, chargebacks, and potential terms violations;
• Customer support: Responding to player enquiries, resolving disputes, and improving support quality;
• Platform improvement: Analysing aggregated, anonymised usage data to improve phgames' games lobby, payment flow, and mobile performance.

phgames does not use personal data for automated individual decision-making that produces legal or similarly significant effects without human oversight.

5. Legal Basis for Processing

phgames processes your personal data on the following legal grounds under the DPA:

• Contract performance: Processing necessary to provide the Services you have contracted with phgames by registering an account;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, anti-money laundering laws, and NPC regulations;
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics, where such interests do not override your rights;
• Consent: Where phgames relies on your explicit consent (e.g., for marketing communications), you may withdraw that consent at any time by contacting phgames support.

6. Data Sharing & Third Parties

6.1 phgames does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6.2 phgames may share personal data with the following categories of third parties, strictly on a need-to-know basis:

• KYC and identity verification providers: To confirm identity and age in compliance with PAGCOR requirements;
• Payment processors: GCash (PayMaya/Maya), BDO, BPI, Metrobank, and other accepted payment partners, for the purpose of processing deposits and withdrawals;
• Game software providers: Game studios whose titles are hosted within the phgames lobby may receive the minimum session data necessary to deliver their games;
• Regulatory and law enforcement bodies: PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and Philippine law enforcement, where disclosure is required by law or regulation;
• IT and infrastructure providers: Cloud hosting and cybersecurity partners operating under strict data processing agreements.

6.3 All third-party data processors engaged by phgames are contractually required to handle personal data in compliance with the DPA and to implement appropriate technical and organisational security measures.

7. Data Retention

phgames retains personal data for as long as your account is active and for a minimum of five (5) years following account closure, in compliance with PAGCOR's record-keeping requirements and Philippine AML obligations. Identity documents submitted for KYC are retained for the same minimum period.

Gaming activity logs are retained for a minimum of three (3) years for dispute resolution purposes. Technical access logs are retained for twelve (12) months. Communications data is retained for two (2) years from the date of the last interaction.

When retention periods expire and no legal obligation requires further retention, phgames will securely delete or anonymise the relevant data.

8. Data Security

phgames implements the following technical and organisational security measures to protect personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and phgames servers;
• Encryption of sensitive data fields at rest in the phgames database;
• Role-based access controls ensuring that only authorised phgames staff can access personal data relevant to their function;
• Multi-factor authentication for phgames internal systems accessing player data;
• Regular security assessments and penetration testing of platform infrastructure;
• Incident response procedures for data breaches, including NPC notification within 72 hours of discovering a qualifying breach as required under the DPA.

Despite these measures, no internet-based platform can guarantee absolute security. phgames encourages players to use strong, unique passwords for their phgames account and to enable SMS OTP authentication.

9. Cookies & Tracking Technologies

9.1 Essential Cookies. phgames uses essential session cookies that are strictly necessary to maintain your logged-in session, remember your language and display preferences, and ensure platform security. These cannot be disabled without impairing core platform functionality.

9.2 Analytics Cookies. phgames uses anonymised, aggregate analytics cookies to understand how players navigate the platform — which games are most visited, where players encounter friction in the payment flow, and how the mobile experience compares to desktop. This data is processed in aggregate and does not identify individual players.

9.3 No Advertising Cookies. phgames does not deploy third-party advertising network cookies or cross-site tracking technologies on the phgames platform.

9.4 Managing Cookies. You may control and delete cookies through your browser settings. Disabling essential cookies will affect your ability to remain logged in to phgames. Disabling analytics cookies will not affect your access to any platform features.

10. Your Rights Under the Data Privacy Act

As a Data Subject under the DPA, phgames players have the following rights, which may be exercised by contacting phgames support:

• Right to be informed: The right to know what personal data phgames holds about you and how it is being used;
• Right of access: The right to request a copy of the personal data phgames holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to phgames' legal retention obligations;
• Right to object: The right to object to processing based on legitimate interests where your rights override those interests;
• Right to data portability: The right to receive your personal data in a structured, machine-readable format where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phgames has processed your data unlawfully.

phgames will respond to verified data rights requests within fifteen (15) business days. We may request additional information to verify your identity before processing a request.

11. Children and Minors

The phgames platform is strictly for persons aged 21 years and above. phgames does not knowingly collect personal data from individuals under the age of 21. If phgames discovers that an account has been registered by a minor, the account will be immediately suspended, any funds will be returned to the payment source, and all associated personal data will be deleted. Parents or guardians who believe a minor has registered on phgames should contact support at [email protected] immediately.

12. Changes to This Policy

phgames may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated via email to your registered address and/or a prominent notice on the phgames platform at least 15 days before the effective date. Continued use of phgames after the effective date constitutes acceptance of the revised Policy.

13. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or phgames' handling of your personal data, contact the phgames Data Protection Officer:

Email: [email protected] (subject: Privacy / DPO Request)
Response time: Within 15 business days for formal DPA requests; within 2 business days for general privacy enquiries via live chat.

You also have the right to file a complaint with the National Privacy Commission of the Philippines if you believe your data rights under the DPA have been violated.