Summary: phcach collects only the personal data necessary to operate a safe, compliant, and enjoyable gaming platform for Filipino players. We do not sell your data to third parties. We protect your information with bank-grade encryption and give you meaningful control over how your data is used. This policy explains everything in plain, readable English.
1. Overview
This Privacy Policy ("Policy") describes how phcach ("the Company," "we," "us," "our") collects, uses, stores, and protects the personal data of individuals ("you," "your," "the Player") who access or use the phcach platform, including its website, mobile web application, and all associated gaming services.
phcach is committed to handling your personal data responsibly and in compliance with applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). Where phcach processes data in connection with players from other jurisdictions, we also observe the data protection principles applicable in those jurisdictions.
By registering a phcach account or using any phcach service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use phcach.
2. Data Controller
phcach is the data controller responsible for the personal data collected through the phcach platform. As data controller, phcach determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable data protection law.
For all data privacy enquiries, requests, and complaints, please contact our Data Protection Officer at: [email protected] (plain text — not a clickable link). We aim to respond to all data privacy requests within fifteen (15) business days.
3. Personal Data We Collect
phcach collects personal data across several categories, depending on how you interact with the platform. The table below summarises the main categories of data we collect and examples of the specific data points within each category.
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number | Yes — for KYC |
| Contact Data | Email address, mobile number, residential address | Yes — for account |
| Financial Data | GCash account reference, Maya account reference, bank account details (name, account number, bank), transaction history | Yes — for payments |
| KYC Documents | Copies of government-issued ID, proof of address documents, selfie/liveness verification images | Yes — for verification |
| Gaming Data | Game history, bet amounts, win/loss records, session durations, bonus usage, responsible gaming tool settings | Yes — for operations |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, referring URL | Automatic |
| Usage Data | Pages visited, features used, click patterns, search queries within the platform, time spent on pages | Automatic |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When you contact us |
| Marketing Preferences | Opt-in/opt-out status for promotional emails and SMS, preferred communication channel | Optional |
Note on Sensitive Data: phcach does not intentionally collect sensitive personal information (as defined under the Data Privacy Act of 2012) beyond what is strictly necessary for identity verification and regulatory compliance. KYC documents are handled with enhanced security controls and access restrictions.
4. How We Collect Your Data
phcach collects personal data through the following channels:
4.1 Directly From You
When you register a phcach account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or participate in a promotion, you provide personal data directly to phcach.
4.2 Automatically
When you access the phcach platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This data helps us maintain platform security, analyse usage patterns, and improve the phcach experience for Filipino players.
4.3 From Third Parties
phcach may receive personal data about you from third-party sources, including:
- KYC verification providers — identity verification results and fraud risk scores.
- Payment processors — transaction confirmation data from GCash, Maya, and partner banks.
- Fraud prevention services — device fingerprinting and behavioural risk signals.
- Regulatory authorities — data shared pursuant to legal obligations or regulatory directives from PAGCOR or the NPC.
5. How We Use Your Personal Data
phcach uses your personal data for the following purposes:
- Account management: Creating, maintaining, and securing your phcach account; authenticating your identity at login; processing account closure requests.
- KYC and compliance: Verifying your identity and age (21+) as required by PAGCOR regulations and anti-money laundering obligations; conducting ongoing transaction monitoring.
- Payment processing: Processing deposits and withdrawals via GCash, Maya, and Philippine bank transfers; reconciling transactions; investigating payment disputes.
- Gaming operations: Delivering casino games, sports betting, bingo, and slot services; recording game outcomes; resolving gameplay disputes.
- Responsible gaming: Monitoring gaming behaviour for signs of problem gambling; enforcing deposit limits, loss limits, and self-exclusion orders; complying with PAGCOR responsible gaming requirements.
- Customer support: Responding to your enquiries, complaints, and feedback; maintaining support records.
- Security and fraud prevention: Detecting and preventing fraud, money laundering, bonus abuse, and unauthorised account access; maintaining platform integrity.
- Marketing (with consent): Sending promotional offers, bonus notifications, and platform updates via email or SMS where you have opted in. You may withdraw consent at any time.
- Analytics and improvement: Analysing platform usage to improve game selection, user experience, and platform performance for Filipino players.
- Legal compliance: Meeting our obligations under Philippine law, PAGCOR regulations, and any applicable court orders or regulatory directives.
6. Legal Basis for Processing
phcach processes your personal data on the following legal bases under the Data Privacy Act of 2012:
Processing is necessary to perform the contract between you and phcach — i.e., to provide the gaming services you have registered to use, process your payments, and manage your account.
Processing is necessary to comply with phcach's legal obligations under Philippine law, including PAGCOR licensing requirements, anti-money laundering regulations, and the Data Privacy Act of 2012.
Processing is necessary for phcach's legitimate interests in maintaining platform security, preventing fraud, improving our services, and protecting the integrity of our gaming operations — provided these interests are not overridden by your data protection rights.
For marketing communications and non-essential cookies, phcach relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
8. Data Retention
phcach retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | PAGCOR licensing & AML obligations |
| Financial & Transaction Data | 5 years after transaction date | Anti-money laundering law (AMLA) |
| KYC Documents | 5 years after account closure | Regulatory compliance |
| Gaming History | 3 years after last activity | Dispute resolution & responsible gaming |
| Support Communications | 2 years after resolution | Quality assurance & dispute records |
| Marketing Preferences | Until consent withdrawn + 1 year | Proof of consent |
| Technical & Usage Data | 13 months | Analytics & security monitoring |
Upon expiry of the applicable retention period, phcach will securely delete or anonymise your personal data. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.
9. Data Security
phcach implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:
- 256-bit SSL/TLS encryption for all data transmitted between your device and phcach's servers.
- Encryption at rest for all sensitive personal and financial data stored on phcach's systems.
- Multi-factor authentication options for player accounts and mandatory MFA for all phcach staff with access to personal data.
- Role-based access controls ensuring that phcach staff can only access personal data necessary for their specific job function.
- Regular security audits and penetration testing conducted by independent security specialists.
- 24/7 security monitoring with automated alerts for suspicious access patterns or potential data breaches.
- Secure data centres with physical access controls, redundant power, and disaster recovery capabilities.
Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, phcach will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.
11. Minors & Age Verification
phcach strictly prohibits access by individuals under 21 years of age, in accordance with Philippine law governing casino-style gambling. phcach does not knowingly collect personal data from individuals under 21.
Age verification is conducted as part of the KYC process for all phcach accounts. Where phcach discovers that personal data has been collected from an individual under 21, that data will be deleted immediately, the account will be suspended, and any deposits will be returned in accordance with applicable law.
⚠️ 21+ Only: If you are a parent or guardian and believe your child has registered a phcach account, please contact us immediately at [email protected] so we can take prompt action.
12. Your Data Protection Rights
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phcach. You may exercise any of these rights by contacting our Data Protection Officer.
Right to Access
Request a copy of the personal data phcach holds about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held by phcach.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Object
Object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Restriction
Request that phcach restricts processing of your data in certain circumstances, such as while a rectification request is being assessed.
Right to Portability
Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
phcach will respond to all data rights requests within fifteen (15) business days. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you. phcach will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.
If you are not satisfied with phcach's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
13. International Data Transfers
phcach's primary operations and data storage are based in the Philippines. In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines — for example, where phcach uses cloud infrastructure or third-party service providers with operations in other jurisdictions.
Where such transfers occur, phcach ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that impose data protection obligations on the recipient equivalent to those applicable in the Philippines. phcach will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without your explicit consent or without implementing appropriate safeguards.
14. Third-Party Services & Links
The phcach platform may contain references to third-party services such as payment providers (GCash, Maya, partner banks). These third parties operate under their own privacy policies, which phcach does not control. phcach encourages you to review the privacy policies of any third-party services you use in connection with your phcach account.
phcach is not responsible for the privacy practices of third-party services and accepts no liability for any data processing carried out by those third parties beyond phcach's direct control.
15. Policy Amendments
phcach reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email or platform notification at least seven (7) days before taking effect.
The current version of this Privacy Policy, together with its effective date, is always available on this page. Your continued use of phcach following the effective date of any amendment constitutes your acceptance of the revised Policy.
16. Contact & Complaints
For any questions, concerns, or requests relating to this Privacy Policy or phcach's data processing practices, please contact our Data Protection Officer:
Email: [email protected] (plain text — not a clickable link) | Response time: within 15 business days
If you are not satisfied with phcach's response, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint is available on the NPC's official website.
Our Privacy Commitments to phcach Players
Here is what phcach's Privacy Policy means in practice for you as a Filipino player:
256-Bit Encryption
Every phcach session is protected by bank-grade SSL/TLS encryption. Your personal and financial data is never transmitted in plain text.
We Never Sell Your Data
phcach does not sell, rent, or trade your personal data to advertisers or data brokers. Your information is used solely to operate and improve phcach.
You Control Your Data
Access, correct, delete, or export your phcach data at any time. Withdraw marketing consent instantly from your account settings.
NPC Compliant
phcach's data practices comply with the Philippine Data Privacy Act of 2012 (RA 10173) and are overseen by a dedicated Data Protection Officer.
Clear Retention Limits
phcach keeps your data only as long as legally required. Once the retention period expires, your data is securely deleted or anonymised.
Easy Opt-Out
Unsubscribe from phcach marketing emails or SMS with a single click. Opting out of marketing never affects your ability to use the platform.
Play on phcach With Confidence
Your data is protected, your privacy is respected, and your winnings are yours. Join thousands of Filipino players who trust phcach for a safe, fair, and exciting gaming experience.