philph Privacy Policy

1 Introduction

philph is committed to protecting the privacy and personal data of every player who uses our platform. As the Philippines' trusted online casino and sports betting destination, we understand that the information you entrust to us is sensitive, and we take our obligations as a data controller seriously.

This Policy sets out in plain language — with proper legal grounding — what personal data philph collects from players located in the Philippines (including Metro Manila, Cebu, Davao, and across the archipelago), why we collect it, how it is processed, who we may share it with, how long we keep it, and what rights you hold under Philippine law.

This Policy is incorporated by reference into the philph Terms & Conditions. Capitalised terms used here but not defined carry the meanings given to them in the Terms & Conditions.

2 Data Controller

The data controller responsible for the personal data collected through the philph platform is philph.cam, headquartered in Metro Manila, Philippines.

As data controller, philph determines the purposes and means of processing your personal data. Where philph engages third-party service providers to process data on its behalf, those parties act as data processors subject to written agreements that impose equivalent privacy and security standards.

3 What Personal Data We Collect

philph collects the following categories of personal data in the course of providing its services to registered players:

3.1 Identity Data

Full legal name, date of birth, nationality, government-issued identification number (e.g., PhilSys ID, passport, UMID, or driver's licence number), and a copy of the relevant identity document for know-your-customer (KYC) verification.

3.2 Contact Data

Registered email address, Philippine mobile number, and residential address (barangay, city/municipality, province).

3.3 Financial Data

Payment method details including GCash or PayMaya account numbers (masked), bank account details (BPI, BDO, Metrobank, Unionbank) used for withdrawals, and transaction history (deposits, withdrawals, bonuses credited and redeemed).

3.4 Gaming & Activity Data

Game history, bet amounts, session durations, login timestamps, device and browser information, IP address, and geolocation data at the time of access.

3.5 Communication Data

Records of communications between you and the philph customer support team, including chat transcripts, email correspondence, and support ticket histories.

3.6 Technical Data

Device type and operating system, browser type and version, screen resolution, referral URL, cookie identifiers, and session tokens generated during platform use.

4 How We Collect Your Data

philph collects personal data through the following means:

• Direct provision by you — during account registration, KYC document submission, payment transactions, support interactions, and participation in promotions or surveys.
• Automated collection — through cookies, web beacons, and similar tracking technologies that operate in the background while you use the philph platform. See Section 9 for full details on cookies.
• Third-party sources — identity verification agencies, payment processors (e.g., GCash, PayMaya), fraud prevention databases, and publicly available records where permitted by law for KYC and anti-money laundering (AML) purposes.
• Referral programmes — where a friend or affiliate refers you to philph, we may receive your contact details. You will be informed of this before your data is processed.

5 Purposes and Legal Basis for Processing

philph processes personal data only for specific, legitimate purposes and always with a lawful basis under the Data Privacy Act of 2012 (RA 10173). The table below summarises our key processing activities:

6 Who We Share Your Data With

philph does not sell personal data. We share your information only in the following circumstances and only to the extent necessary:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, Unionbank, and other payment partners receive the minimum financial and identity data required to process your transactions securely.
• Identity verification providers — third-party KYC and AML screening services receive identity documents and data to perform required verification checks.
• Game software providers — Pragmatic Play, JILI, PG Soft, and similar providers receive anonymised or pseudonymised technical data necessary to deliver and audit game sessions. They do not receive your full identity profile.
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), and law enforcement agencies may receive data where we are under a legal obligation to disclose, or where disclosure is necessary to prevent or detect crime.
• Professional advisers — lawyers, auditors, and accountants who are bound by professional secrecy obligations, when required for the conduct of their services to philph.
• Business successors — in the event of a merger, acquisition, or restructuring of philph, your data may be transferred to the successor entity, subject to the same privacy protections set out in this Policy.

7 International Data Transfers

Some of philph's service providers — including game software developers and certain technical infrastructure partners — may be located outside of the Philippines. Where personal data is transferred to a country that does not offer an equivalent level of data protection to the Philippines, philph puts in place appropriate safeguards, which may include:

• Standard contractual clauses approved by the National Privacy Commission;
• Binding corporate rules where the recipient is part of the same corporate group;
• Adequacy decisions where recognised by the NPC.

You may request details of the specific safeguards applied to any given transfer by contacting our Data Protection Officer at [email protected].

8 Data Retention

philph retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our regulatory obligations. In practice, the following retention periods apply as a general guide:

• Account and identity data — retained for the duration of your account plus a minimum of five (5) years after account closure, as required by anti-money laundering regulations.
• Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction in compliance with RA 9160 and related PAGCOR requirements.
• Customer support communications — retained for three (3) years from the date of the last communication, or longer if the matter is subject to ongoing legal proceedings.
• Gaming and session data — retained for three (3) years for game audit and dispute resolution purposes.
• Marketing consent records — retained for the period during which you remain a player plus two (2) years, to demonstrate consent in the event of a regulatory inquiry.

When data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original personal information.

9 Cookies and Tracking Technologies

philph uses cookies and similar technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant promotional content. The types of cookies we use are:

• Strictly necessary cookies — essential for platform functionality such as maintaining your login session, shopping cart state, and security tokens. These cannot be disabled without impairing platform use.
• Performance cookies — collect anonymised data on how players navigate the philph platform to help us identify and fix issues and improve user experience.
• Functionality cookies — remember your preferences such as language settings, preferred game categories, and display options.
• Targeting and analytics cookies — used with your consent to understand which promotions and game types interest you and to ensure the offers we send you are relevant to your playing habits.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the philph platform. Continuing to use philph after being informed of our cookie use constitutes acceptance of strictly necessary cookies.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you hold the following rights in respect of personal data that philph holds about you:

• Right to be Informed — to know what personal data about you is being collected, how it is used, and to whom it is disclosed, before and at the time of collection.
• Right of Access — to request a copy of the personal data philph holds about you, along with information about how it is processed.
• Right to Rectification — to have inaccurate or incomplete personal data corrected without undue delay.
• Right to Erasure or Blocking — to request deletion or blocking of personal data where it is unlawful, no longer necessary for the original purpose, or where you have withdrawn consent and there is no other lawful basis for continued processing. This right is subject to our legal retention obligations.
• Right to Damages — to seek compensation for any damage caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of personal data.
• Right to Portability — to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Object — to object to the processing of your personal data for direct marketing purposes at any time without needing to provide a reason.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request." philph will respond within fifteen (15) business days. We may request proof of identity before actioning your request.

11 Children's Privacy

The philph platform is strictly for adults aged twenty-one (21) years and above. philph does not knowingly collect or process personal data from persons under the age of 21. If philph becomes aware that a minor has registered on the platform, the account will be immediately suspended and all associated data will be securely deleted, with any deposits refunded to the source payment method where technically possible.

12 Security Measures

philph implements appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and philph servers;
• Encryption at rest for sensitive data stored in philph databases, including identity documents and financial records;
• Role-based access controls ensuring that philph staff can access personal data only to the extent required by their specific job function;
• Multi-factor authentication for all philph staff access to production systems containing personal data;
• Regular penetration testing and security audits conducted by independent third-party specialists;
• Documented incident response procedures covering detection, containment, notification, and post-incident review of data security events.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, philph will notify affected players and the National Privacy Commission within the timeframes prescribed by RA 10173 and NPC regulations.

13 Third-Party Links

The philph platform may contain informational references to third-party services such as payment processors. philph is not responsible for the privacy practices or content of those third-party services. We encourage you to review the privacy policies of any third-party service before providing personal data to them. This Policy applies only to data processed by philph in connection with philph.cam.

14 Marketing Preferences

With your consent, philph may contact you by email, SMS to your Philippine mobile number, or push notification with information about promotions, new games, loyalty rewards, and other offers that may be of interest to you based on your gaming activity and preferences.

You may withdraw your marketing consent and update your communication preferences at any time by:

• Logging into your philph account and adjusting notification settings;
• Clicking the "unsubscribe" link included in every philph marketing email;
• Replying "STOP" to any SMS marketing message sent from philph; or
• Contacting our support team at [email protected].

Withdrawing marketing consent does not affect the lawfulness of any processing carried out before your withdrawal. You will continue to receive essential transactional communications related to your account (e.g., deposit confirmations, withdrawal notifications, security alerts) regardless of your marketing preferences.

15 Updates to This Policy

philph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes, we will notify registered players by email to the address on file and/or through a prominent notice on the philph platform, at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Policy periodically. Continued use of the philph platform after the effective date of a revised Policy constitutes acceptance of the updated terms.

16 Contact and Complaints

For questions, concerns, or requests relating to this Privacy Policy or the personal data philph holds about you, please contact our Data Protection Officer:

If you are not satisfied with how philph handles your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act. Information about filing a complaint with the NPC is available through official government channels.

philph will cooperate fully with any NPC investigation and will implement any corrective actions directed by the NPC in the event of a finding against us.