Privacy Policy – phppone Online Casino Philippines

1 Who We Are and Scope of This Policy

phppone ("phppone", "we", "us", "our") is the operator of the online casino and sports betting platform accessible at phppone.vip. phppone is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) to offer online gaming services to eligible residents of the Republic of the Philippines.

This Privacy Policy applies to all personal data collected through the phppone platform, including data provided during account registration, identity verification (KYC), payment processing, customer support interactions, and general use of the platform's features and services. It applies to all members and registered users of phppone, regardless of the device used to access the platform.

phppone is the data controller with respect to personal data processed under this Policy. Our designated Data Protection Officer (DPO) can be contacted at the email address provided in Section 12 of this Policy.

2 Personal Data We Collect

phppone collects personal data through several channels in the course of operating its platform. The categories of personal data we collect are as follows:

2.1 Registration and Identity Data

• Full legal name as appearing on a valid Philippine government-issued ID;
• Date of birth (to verify minimum age of 21 years);
• Philippine mobile number (in +63 format);
• Email address;
• Permanent residential address in the Philippines;
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

In compliance with PAGCOR requirements and the Anti-Money Laundering Act (AMLA), phppone collects copies of the following documents for identity verification purposes:

• Government-issued Philippine photo ID (e.g., PhilSys ID, passport, driver's license, UMID, SSS ID, or Voter's ID);
• Proof of address where required for enhanced due diligence;
• Source of funds documentation where required by AMLA compliance obligations.

2.3 Financial and Transaction Data

• GCash mobile number or PayMaya account details used for deposits and withdrawals;
• Bank account details (BPI, BDO, Metrobank, UnionBank) where provided for bank transfers;
• Deposit history, withdrawal history, and transaction records;
• Betting and gaming history, including stakes, results, and game types.

2.4 Technical and Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session duration and timestamps;
• Pages visited and features accessed on the phppone platform;
• Error logs and crash reports.

2.5 Communications Data

• Records of customer support interactions via chat, email, or any other support channel;
• Feedback and survey responses submitted voluntarily;
• Marketing communication preferences and opt-in/opt-out records.

3 How phppone Uses Your Personal Data

phppone uses the personal data it collects for the following stated purposes:

Purpose	Data Used
Account creation and management	Registration data, contact details
Identity verification (KYC/AMLA compliance)	ID documents, date of birth, address
Processing deposits and withdrawals	Financial data, transaction records
Fraud prevention and security monitoring	Technical data, transaction data, IP address
Regulatory reporting to PAGCOR and AMLC	Identity data, transaction records
Customer support and dispute resolution	Communications data, account data
Responsible gaming monitoring	Gaming history, session data
Platform improvement and analytics	Technical and usage data (aggregated)
Marketing communications (with consent)	Contact details, communication preferences

phppone will not use your personal data for any purpose not listed above without first obtaining your consent or as otherwise permitted under the Data Privacy Act of 2012.

4 Legal Basis for Processing Personal Data

phppone processes personal data under one or more of the following legal bases as recognized under Republic Act No. 10173:

1. Consent: Where you have provided explicit consent, such as when opting in to marketing communications;
2. Contractual Necessity: Processing required to fulfill the terms of the phppone Member Agreement, including account operation, deposits, and withdrawals;
3. Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, and other applicable Philippine laws;
4. Legitimate Interests: Processing carried out for phppone's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these do not override your privacy rights.

5 Data Sharing and Disclosure

phppone does not sell, rent, or trade your personal data to third parties for commercial purposes. phppone may share your personal data with the following categories of recipients in the circumstances described below:

5.1 Regulatory and Government Authorities

phppone is required to share relevant member data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities as required by law, PAGCOR licensing conditions, or valid legal process such as a court order or subpoena.

5.2 Payment Service Providers

phppone shares necessary financial data with payment service providers — including GCash (Globe Fintech Innovations, Inc.), Maya Philippines, Inc., and Philippine partner banks — for the sole purpose of processing your deposit and withdrawal transactions. These providers are subject to their own data privacy and security obligations under Philippine law.

5.3 Technology and Service Providers

phppone works with third-party technology providers for platform hosting, game delivery, customer support tools, and analytics. These providers process personal data on phppone's behalf as data processors and are contractually bound to process data only as instructed by phppone and in accordance with applicable privacy law.

5.4 Game Content Providers

Game providers integrated into the phppone platform (such as JILI Games, PG Soft, and Pragmatic Play) may receive game session data — such as bet amounts, game outcomes, and RNG seeds — as required for game delivery and certification purposes. This data does not typically include directly identifying personal information beyond a session identifier.

6 Data Retention

phppone retains personal data for periods determined by the purpose for which it was collected and by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and AMLA compliance obligations;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, or longer if required by AMLC reporting rules;
• Gaming history: Retained for three (3) years to support dispute resolution, responsible gaming monitoring, and regulatory audits;
• Customer support communications: Retained for two (2) years following the resolution of the relevant inquiry;
• Technical and usage data: Retained in identifiable form for up to twelve (12) months, after which it is aggregated and anonymized;
• Marketing consent records: Retained until consent is withdrawn or for three (3) years from the last interaction, whichever is earlier.

Upon expiry of the applicable retention period, phppone will securely delete or anonymize personal data unless continued retention is required by law or by an ongoing regulatory inquiry.

7 Security Measures

phppone implements a comprehensive set of technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phppone platform;
• Encryption at rest for sensitive personal data and financial records stored on phppone's servers;
• Role-based access controls ensuring that only authorized phppone personnel can access member data, and only to the extent required for their specific function;
• Two-factor authentication (2FA) available and recommended for all member accounts;
• Regular penetration testing and security audits conducted by qualified third-party security professionals;
• Intrusion detection and prevention systems monitoring for suspicious activity;
• Data processing agreements with all third-party service providers accessing member data;
• Staff training on data privacy obligations and phppone's data handling procedures.

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, phppone will notify the National Privacy Commission and affected members in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

8 Cookies and Tracking Technologies

phppone uses cookies and similar tracking technologies to support the operation of its platform and to improve your experience. The following categories of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the phppone platform to function correctly. They manage your login session, security tokens, and language preferences. They cannot be disabled without significantly impairing your ability to use the platform.

8.2 Functional Cookies

Functional cookies remember your preferences — such as your preferred game category, display settings, and responsible gaming tool configurations — so you do not need to reset them on every visit.

8.3 Analytics Cookies

phppone uses analytics tools to understand how members use the platform in aggregate. Analytics data is used to identify technical issues, improve platform performance, and guide product development decisions. Analytics data is processed in aggregated and anonymized form.

8.4 Managing Cookies

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your phppone account and using the platform's core features. phppone does not currently respond to "Do Not Track" browser signals, as no industry-standard interpretation of such signals exists under Philippine law.

9 Your Data Rights Under Philippine Law

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by phppone. These rights may be exercised by submitting a written request to phppone's Data Protection Officer at the contact address provided in Section 12.

1. Right to Be Informed: You have the right to be informed of how your personal data is being collected, processed, and used — which this Privacy Policy fulfils;
2. Right of Access: You have the right to request a copy of the personal data phppone holds about you and to receive information on how it is being processed;
3. Right to Correction: You have the right to request correction of any inaccurate or outdated personal data held by phppone;
4. Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to phppone's legal retention obligations;
5. Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on phppone's legitimate interests;
6. Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
7. Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phppone has violated your rights under the Data Privacy Act.

phppone will respond to all data subject rights requests within fifteen (15) business days of receipt. Where a request is complex or relates to a large volume of data, phppone may extend this period by a further fifteen (15) business days, with prior notification to the requester.

10 Minors and Age Verification

The phppone platform is strictly restricted to individuals aged twenty-one (21) years and above in accordance with PAGCOR regulations and Philippine law governing online gaming. phppone does not knowingly collect personal data from individuals under the age of 21.

phppone requires all members to complete age verification during the KYC process by submitting a valid government-issued Philippine ID confirming date of birth. Where phppone discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be suspended and reported to PAGCOR as required by applicable regulations.

11 Third-Party Services and Links

The phppone platform integrates third-party services — including game providers, payment processors, and analytics tools — as described in this Privacy Policy. phppone is not responsible for the privacy practices of these third parties beyond the data processing agreements it holds with them as processors. phppone encourages members to review the privacy policies of any third-party service providers they interact with directly.

The phppone platform does not contain links to third-party websites for commercial or referral purposes. Any navigation links on the phppone platform direct members to phppone's own pages only.

12 Policy Amendments and How to Contact Us

phppone reserves the right to update or amend this Privacy Policy at any time to reflect changes in its data processing practices, applicable law, or PAGCOR requirements. Material changes to this Policy will be communicated to registered members via email or in-platform notification at least seven (7) calendar days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Continued use of the phppone platform after a revised Privacy Policy has taken effect constitutes your acceptance of the updated terms.

12.1 Data Protection Officer Contact

For all privacy-related inquiries, data subject rights requests, or concerns regarding phppone's data handling practices, please contact phppone's Data Protection Officer:

• Email: [email protected]
• Subject line: Privacy / Data Request – [Your Name]
• Response time: Within 15 business days of receipt

If you are not satisfied with phppone's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.