Privacy Policy

phphil operates the online gaming platform accessible at phphil.net, offering Filipino players access to slots, live casino games, sports betting, bingo, and sabong under a PAGCOR-regulated gaming license. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), phphil acts as the Personal Information Controller (PIC) in respect of all personal data collected from players and visitors to the phphil platform.

As a PAGCOR-licensed operator, phphil is also subject to regulatory data obligations imposed by the Philippine Amusement and Gaming Corporation, the Bangko Sentral ng Pilipinas (BSP) Anti-Money Laundering framework, and the National Privacy Commission (NPC) of the Philippines. This Privacy Policy is designed to meet and exceed the requirements of all applicable Philippine data protection law.

phphil collects personal data from you in the following ways: information you provide directly during registration or KYC, information generated automatically through your use of the platform, and information received from third-party payment and identity verification service providers. The categories of personal data we collect include:

phphil uses your personal data only for the purposes for which it was collected and as permitted by Philippine law. The primary purposes for which we process your data are:

• Account Management: To create, maintain, and secure your phphil player account, verify your identity, and enforce the 21+ age requirement mandated by PAGCOR.
• Service Delivery: To provide you with access to all phphil gaming services — slots, live casino, sports betting, bingo, and sabong — and to process your deposits, withdrawals, and bonus credits accurately.
• Regulatory Compliance: To fulfil phphil's legal obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), and KYC requirements. Certain data must be collected and retained to comply with PAGCOR reporting obligations regardless of your consent preferences.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, bonus abuse, and other prohibited conduct as defined in phphil's Terms & Conditions.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling and to administer self-exclusion, deposit limit, and cooling-off tools at your request or as required by PAGCOR guidelines.
• Customer Support: To respond to your queries, investigate complaints, and resolve disputes through phphil's support channels.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and gaming news via email or SMS — only where you have opted in to receive such communications and subject to your right to opt out at any time.
• Platform Improvement: To analyze aggregated and anonymized usage data to improve platform performance, game selection, and the overall player experience.

phphil does not use your personal data for automated decision-making or profiling in a manner that produces legal effects or similarly significantly affects you without your explicit consent.

phphil processes your personal data on the following legal bases under RA 10173:

• Contractual Necessity: Processing required to deliver the phphil gaming service you have contracted for — including account creation, deposits, withdrawals, and game access — is processed on the basis that it is necessary for the performance of our contract with you.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AML obligations under RA 9160, and NPC data management requirements is processed on the basis of legal obligation. You cannot opt out of this category of processing while your account is active.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring is based on phphil's legitimate interest in operating a safe, regulated gaming platform. We have assessed that these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional analytics cookies is based on your explicit consent. You may withdraw consent at any time via your account dashboard or by contacting support, without affecting the lawfulness of processing based on consent before withdrawal.

phphil shares your personal data only in the limited circumstances described below. We do not sell, rent, or otherwise commercially disclose your personal information to any third party.

• PAGCOR & Philippine Regulatory Authorities: phphil is required by law to report certain player data, transaction records, and suspicious activity reports to PAGCOR, the AMLC (Anti-Money Laundering Council), and other competent Philippine government authorities upon lawful request or as mandated by our operating license.
• Payment Service Providers: To process your deposits and withdrawals, phphil shares necessary financial data (account reference, transaction amount, timestamp) with GCash, Maya, BPI, BDO, UnionBank, 7-Eleven CLiQQ, USDT/blockchain network processors, and Coins.ph. These providers act as Personal Information Processors (PIPs) under RA 10173 and are bound by data processing agreements.
• KYC & Identity Verification Providers: phphil uses third-party identity verification technology to assist with document authentication and age verification. KYC providers are contractually bound to use your data solely for identity verification and to maintain appropriate security standards.
• Game Content Providers: When you play a game on phphil, your session data (bet records, game round IDs, account tier) is shared with the relevant game provider for the purpose of delivering the game and resolving disputes. Game providers do not receive your identity documents or financial account details.
• IT & Platform Infrastructure Providers: phphil uses third-party cloud hosting, content delivery, and cybersecurity services to operate the platform. These providers are bound by confidentiality agreements and may not use your data for any purpose other than providing their contracted infrastructure services to phphil.

phphil uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze platform performance. The following cookie categories are used:

You can manage your cookie preferences at any time through your browser settings or the phphil cookie preference panel in your account dashboard. Note that disabling strictly necessary cookies will prevent you from logging in to or using the phphil platform.

phphil retains your personal data only for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable Philippine legal and regulatory requirements. The following retention schedules apply:

At the end of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved disposal procedures. Data subject to ongoing legal proceedings or regulatory investigation may be held beyond the standard retention period until the matter is resolved.

phphil implements a layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• TLS 1.3 Encryption in Transit: All data exchanged between your browser or device and the phphil platform is encrypted using TLS 1.3, the current industry standard for transport layer security.
• AES-256 Encryption at Rest: Sensitive data stored on phphil's servers — including KYC documents and financial records — is encrypted at rest using AES-256.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Staff access is logged, audited, and subject to regular review. KYC documents are accessible only to authorized compliance personnel.
• Two-Factor Authentication: phphil offers 2FA for player accounts and mandates 2FA for all internal staff accounts with access to personal data systems.
• Penetration Testing: phphil's platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses.
• Incident Response: In the event of a personal data breach, phphil will notify the National Privacy Commission within 72 hours of becoming aware, as required by NPC Circular 16-03. Affected players will be notified without undue delay where the breach is likely to result in high risk to their rights.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights as a data subject with respect to your personal information held by phphil:

To exercise any of the above rights, contact phphil's Data Protection Officer at [email protected] with the subject line [DATA SUBJECT REQUEST]. phphil will respond to all valid data subject requests within fifteen (15) business days of receipt, as required by the NPC.

The phphil platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR's minimum age requirements for online casino and gambling services in the Philippines. phphil does not knowingly collect personal data from individuals under the age of 21.

Age verification is performed as part of the registration process and is confirmed through KYC document review before any withdrawal is processed. If phphil discovers that an account has been registered by a person under the age of 21, the account will be closed immediately, all funds will be returned in accordance with PAGCOR protocol, and any personal data collected will be deleted promptly.

Some of phphil's third-party service providers — including cloud infrastructure, game content providers, and payment processors — may process personal data on servers located outside the Philippines. Where international transfers of personal data occur, phphil ensures that appropriate safeguards are in place as required by RA 10173 and NPC guidelines, including:

• Data processing agreements incorporating the NPC's model clauses for cross-border data transfers.
• Transfers only to countries or organizations that provide an adequate level of data protection, as assessed by phphil's compliance team.
• Where necessary, implementation of additional contractual or technical safeguards to ensure your data remains protected to Philippine legal standards.

phphil does not transfer personal data to jurisdictions that the NPC has identified as providing inadequate data protection without first implementing appropriate contractual safeguards and, where required, obtaining your prior consent.

phphil reserves the right to update or amend this Privacy Policy from time to time to reflect changes in Philippine law, NPC guidance, PAGCOR regulatory requirements, or our business practices. When we make material changes to this Policy, we will:

• Post the revised Privacy Policy on this page with an updated effective date displayed at the top of the document.
• Send a notification to the email address registered to your phphil account at least seven (7) days before the changes take effect, where the changes materially affect how we process your personal data.
• Display a prominent notice on the phphil platform for a minimum of fourteen (14) days following any material update.

Your continued use of the phphil platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of, and agreement to, the updated terms. If you do not agree with any changes, you may close your account by contacting phphil support prior to the effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how phphil protects your personal data. Non-material changes — such as typographical corrections or formatting adjustments — will not trigger a notification but will be reflected on this page immediately.

If you have any questions, concerns, or requests relating to this Privacy Policy or phphil's handling of your personal data, you may contact us through the following channels:

phphil is committed to resolving all data privacy concerns promptly and transparently. We view compliance with RA 10173 not merely as a legal obligation but as a core part of the trust we build with every Filipino player on our platform.