phcash Privacy Policy

1.Introduction

phcash ("we," "us," "our") is committed to protecting the privacy and personal data of all players and visitors who use the phcash platform at phcash.one (the "Platform"). This Privacy Policy describes how phcash collects, uses, stores, shares, and protects personal information in connection with the operation of the phcash online casino and sports betting platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It also reflects phcash's obligations under PAGCOR regulations regarding player data management.

By registering for a phcash account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the phcash Platform.

2.Data Controller

phcash is the personal information controller (PIC) in respect of the personal data collected through the Platform. As PIC, phcash determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Data Privacy Act of 2012 and all applicable regulations.

phcash has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. Contact details for the DPO are provided in Section 14 of this Policy.

3.Personal Data We Collect

phcash collects the following categories of personal data:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify the 21+ age requirement)
• Residential address (including barangay, city/municipality, province)
• Email address
• Mobile number (Philippine mobile number)
• Government-issued ID type and number (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID)

3.2 Financial Data

• GCash or PayMaya account number (where used for deposits or withdrawals)
• Bank account details (account name, account number, bank name) for bank transfer transactions
• Debit card details (card number, expiry — processed securely and not stored in full by phcash)
• Transaction history, including deposit amounts, withdrawal amounts, and dates

3.3 Gaming & Account Data

• phcash account username and encrypted password
• Betting history, game session data, and wagering records
• Bonus and promotion usage history
• Responsible gaming settings (deposit limits, session timers, self-exclusion status)
• Customer support communications and complaint records

3.4 Technical & Usage Data

• IP address and approximate geolocation (to verify Philippine residency)
• Device type, operating system, and browser information
• Pages visited on the Platform, time spent, and navigation patterns
• Login timestamps and session duration

3.5 Sensitive Personal Information

In limited circumstances required by PAGCOR regulations or anti-money laundering compliance, phcash may collect sensitive personal information as defined under the DPA, including government ID numbers. Such data is processed only to the extent strictly necessary for regulatory compliance and is subject to enhanced security measures.

4.How We Collect Your Data

phcash collects personal data through the following means:

• Registration form: when you create your phcash account;
• KYC verification: when you submit identity documents as required by PAGCOR;
• Deposits and withdrawals: when you transact through GCash, PayMaya, bank transfer, or debit card;
• Platform usage: automatically via cookies, log files, and analytics tools as you navigate the Platform;
• Customer support: when you contact our support team via chat or email;
• Promotions: when you opt in to bonuses, tournaments, or other phcash promotional activities.

5.How We Use Your Personal Data

phcash uses your personal data for the following purposes:

6.Legal Basis for Processing

phcash processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and phcash (i.e., operating your account, processing transactions, delivering gaming services);
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7.Data Sharing & Disclosure

7.1 phcash does not sell, rent, or trade your personal data to third parties for their own marketing purposes. phcash may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• PAGCOR and regulatory authorities: as required by our gaming license and applicable regulations;
• Anti-Money Laundering Council (AMLC): for mandatory suspicious transaction reporting under the AMLA;
• National Privacy Commission (NPC): in the event of a data breach or as otherwise required by the DPA;
• Payment service providers: GCash, PayMaya, and Philippine banks, solely to process your deposits and withdrawals;
• KYC and identity verification providers: third-party services engaged to assist with document verification, operating under strict data processing agreements;
• Game software providers: to the extent necessary to deliver the games you play, under contractual data protection obligations;
• IT and cloud service providers: who host and maintain the phcash Platform infrastructure, under data processing agreements that require equivalent data protection standards;
• Law enforcement agencies: where required by a valid court order, subpoena, or other lawful process under Philippine law.

7.2 All third parties with whom phcash shares personal data are required to process such data only for the specified purpose and in accordance with applicable data protection laws. phcash does not transfer personal data outside the Philippines except where required by law or where adequate data protection safeguards are in place.

8.Data Retention

8.1 phcash retains your personal data for as long as your phcash account is active and for such additional period as is required by law or regulation. The following retention periods apply:

8.2 After the applicable retention period, phcash will securely delete or anonymize your personal data in accordance with NPC guidelines.

9.Data Security

9.1 phcash implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phcash Platform;
• Encryption of sensitive data at rest in our databases;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security vulnerability assessments and penetration testing;
• Multi-factor authentication for administrative access to systems containing personal data;
• Staff training on data protection obligations and security best practices.

9.2 While phcash takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your phcash account credentials confidential and for notifying us immediately of any suspected unauthorized access to your account.

9.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phcash will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the DPA and NPC Circular No. 16-03.

10.Cookies & Tracking Technologies

10.1 phcash uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits.
• Analytics cookies: Collect anonymized data about how players use the Platform to help us improve performance and user experience. Used only with your consent.
• Marketing cookies: Used to deliver relevant promotional content about phcash. Used only with your explicit consent.

10.2 You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core phcash Platform, though some features may be limited.

11.Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phcash:

• Right to be informed: The right to know that your personal data is being collected and processed, and the purposes for which it is used — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data phcash holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phcash has violated your data privacy rights.

To exercise any of these rights, please contact phcash's Data Protection Officer using the contact details in Section 14. phcash will respond to your request within fifteen (15) business days. Some requests may be subject to identity verification before processing.

12.Minors & Age Restriction

If phcash becomes aware that personal data has been collected from a person under 21 years of age, such data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on the phcash Platform, please contact us immediately using the details in Section 14.

13.Changes to This Privacy Policy

13.1 phcash reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered players via email or prominent notice on the Platform at least seven (7) days before taking effect.

13.2 The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Privacy Policy periodically. Your continued use of the phcash Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

14.Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phcash, please contact our Data Protection Officer:

For general support inquiries, you may also reach our customer support team at [email protected]. Our support team is available 24/7, Philippine Standard Time.

For responsible gaming concerns, please visit our Responsible Gaming page. For a full overview of your rights and obligations on the phcash Platform, please review our Terms & Conditions.