phgames Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phgames ("phgames", "we", "us", "our"), the operator of the online gaming platform accessible at phgames.bio, collects, uses, stores, shares, and protects the personal information of individuals who access or use the phgames platform ("Players", "Users", "you").

phgames is committed to safeguarding the privacy and personal data of all users, with particular regard to the obligations imposed by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission of the Philippines.

By registering an account, making a deposit, or otherwise using the phgames platform, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree to this Policy, you must not use the phgames platform. This Policy is incorporated by reference into the phgames Terms and Conditions.

2. Data Controller

phgames acts as the data controller with respect to the personal data of registered players and website visitors. As data controller, phgames determines the purposes and means of processing your personal data. phgames's data protection contact can be reached at the support email address listed in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Registration Data

When you create a phgames account, we collect: full legal name; date of birth (for age verification); Philippine mobile number; email address (if provided); and a password (stored in hashed form — phgames never stores passwords in plain text).

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify that players meet the 21+ age requirement, phgames may collect: government-issued identification documents (e.g., PhilSys national ID, Philippine passport, driver's licence); selfie photographs for facial liveness verification; and proof of address documentation.

3.3 Financial Data

phgames collects data related to financial transactions on the platform, including: GCash account details; Maya account details; bank account information (BPI, BDO, UnionBank) where provided for withdrawal purposes; deposit and withdrawal transaction records; and cryptocurrency wallet addresses (USDT TRC20) where applicable. phgames does not store full payment card numbers. Payment processing for card transactions is handled by PCI-DSS compliant payment processors.

3.4 Gaming Activity Data

phgames records all gaming activity conducted through your account, including: game sessions and results; bet amounts and outcomes; sports betting selections and wager history; bonus usage and wagering progress; and session timestamps and durations.

3.5 Technical and Device Data

When you access the phgames platform, we automatically collect certain technical information, including: IP address; device type, operating system, and browser version; screen resolution and device identifiers; referring URL and navigation path within the platform; and session duration and page interaction data.

3.6 Communications Data

If you contact phgames support, we retain records of the communications exchanged, including chat transcripts and any documents or screenshots shared during the support interaction.

4. How We Collect Your Data

phgames collects personal data through the following channels:

• Direct collection: Data you provide during registration, KYC, payment setup, or when contacting support.
• Automated collection: Technical and device data collected automatically during platform use via server logs, cookies, and similar technologies (see Section 11).
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance screening services; and payment confirmation data from GCash, Maya, and banking partners.

5. Purposes of Processing

phgames processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your phgames account; enabling phgames login; resetting credentials.
• Identity verification: Verifying your age (21+ requirement) and identity in compliance with PAGCOR requirements and anti-money laundering regulations.
• Payment processing: Processing deposits and withdrawals via GCash, Maya, banks, and other accepted payment channels; detecting and preventing payment fraud.
• Service delivery: Operating casino games, sports betting, and all other platform features; personalising game recommendations and lobby layout.
• Responsible gaming: Monitoring gaming patterns to detect problem gambling indicators; administering self-exclusion and deposit limit tools.
• Legal and regulatory compliance: Meeting obligations under Philippine AML laws, PAGCOR requirements, and National Privacy Commission guidelines; retaining records as required by law.
• Fraud prevention and security: Detecting suspicious login activity, bonus abuse, multi-accounting, and other prohibited conduct.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates where you have consented to receive such communications.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.

6. Legal Bases for Processing

phgames relies on the following legal bases under the Data Privacy Act of 2012 for processing your personal data:

• Contractual necessity: Processing required to perform our obligations under the phgames Terms and Conditions — including account operation, payments, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, PAGCOR regulations, AML requirements, and National Privacy Commission directives.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have provided explicit, informed consent and may withdraw it at any time.

7. Disclosure to Third Parties

7.1 Service Providers

phgames shares personal data with third-party service providers who process data on our behalf under written data processing agreements, including: KYC and identity verification providers; payment processing partners (GCash, Maya, banking APIs); game software providers (who may receive anonymised session data); customer support platform providers; and fraud detection and AML screening services.

7.2 Regulatory and Law Enforcement Disclosure

phgames will disclose personal data to regulatory authorities (including PAGCOR and the Anti-Money Laundering Council), law enforcement agencies, and courts where required to do so by applicable Philippine law, lawful court order, or regulatory directive.

7.3 No Sale of Personal Data

phgames does not sell, rent, or otherwise transfer your personal data to third-party marketers or data brokers. Personal data is shared with third parties only as described in this Policy.

8. International Data Transfers

Some phgames service providers and game software partners may be located outside the Philippines. Where personal data is transferred outside the Philippines, phgames ensures that adequate safeguards are in place consistent with the requirements of the Data Privacy Act of 2012, including contractual clauses requiring the recipient to provide a level of data protection equivalent to Philippine standards.

9. Data Retention

phgames retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for a minimum period required by applicable law. Specifically:

• Account and KYC data: retained for a minimum of five (5) years following account closure, as required by AML regulations.
• Transaction records: retained for a minimum of five (5) years following each transaction.
• Gaming activity logs: retained for three (3) years for responsible gaming and dispute resolution purposes.
• Marketing consent records: retained until consent is withdrawn and for one (1) year thereafter.
• Technical logs: retained for twelve (12) months for security and fraud investigation purposes.

Following the applicable retention period, personal data is securely deleted or anonymised.

10. Security Measures

phgames implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and phgames servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial data.
• Bcrypt password hashing — phgames never stores passwords in recoverable plain text.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Multi-factor authentication on internal systems accessing personal data.
• Regular penetration testing and security audits by independent third-party security firms.
• Device recognition and anomalous login detection for player account protection.

In the event of a personal data breach that is likely to result in risk to affected individuals, phgames will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act of 2012.

11. Cookies and Tracking Technologies

phgames uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential cookies: Required for the platform to function, including maintaining your phgames login session and storing preferences. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Aggregated, anonymised data on how players navigate and use the platform, used to improve the phgames experience. No personally identifiable information is retained in analytics data.
• Security cookies: Used for fraud detection and session security, including device fingerprinting to identify recognised devices for trusted login purposes.

You may configure your browser to refuse non-essential cookies. Doing so will not prevent access to the phgames platform but may affect certain preference and personalisation features.

12. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phgames:

• Right to be informed: The right to know that phgames is processing your personal data and the purposes and bases for that processing — which this Policy provides.
• Right of access: The right to obtain a copy of the personal data phgames holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to retention obligations imposed by applicable law.
• Right to object: The right to object to processing of your personal data for direct marketing purposes. You may exercise this right at any time via your phgames account notification settings.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used format where processing is based on consent or contractual necessity.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phgames has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact phgames support at the address in Section 15. phgames will respond to verified requests within thirty (30) days.

13. Children's Privacy

The phgames platform is strictly for individuals aged 21 years and above. phgames does not knowingly collect personal data from persons under 21. If phgames becomes aware that it has collected personal data from a person under 21, the account will be immediately closed and the data deleted or returned, subject to any mandatory retention obligations.

14. Changes to This Privacy Policy

phgames reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the contact information on file and/or by prominent notice on the phgames Website. The revised Policy will be effective from the date of publication. Continued use of the phgames platform after the effective date constitutes acceptance of the updated Policy. If you do not accept the updated Policy, you must cease using the platform and may close your account.

15. Contact and Complaints

For all privacy-related enquiries, requests to exercise your data rights, or complaints regarding phgames's handling of your personal data, please contact the phgames Data Protection Officer:

Support and DPO contact: [email protected]

phgames is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines via their official channels.

This Privacy Policy was last reviewed and updated on 5 June 2026. Prior versions are available on request from phgames support.