phcah Privacy
Policy

1. Introduction

This Privacy Policy ("Policy") describes how phcah ("phcah," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the phcah website, mobile platform, and associated gaming services (collectively, the "Platform").

phcah is committed to handling your personal data responsibly and in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). Where applicable, phcah also adheres to the data protection requirements of the Philippine Amusement and Gaming Corporation (PAGCOR) regulatory framework.

By registering a phcah account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the phcah Platform.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

phcah collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, government-issued ID number, nationality	Account registration, age verification (21+), KYC compliance
Contact Data	Email address, mobile number, residential address (city, province)	Account communication, support, notifications
Financial Data	GCash number, PayMaya account, bank account details, transaction history	Deposits, withdrawals, fraud prevention, AML compliance
Gaming Data	Game history, bet amounts, win/loss records, session duration, bonus usage	Service delivery, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser, operating system, login timestamps	Security, fraud detection, platform optimization
Usage Data	Pages visited, features used, click patterns, session duration	Platform improvement, personalization, analytics
Communications Data	Support chat logs, email correspondence, feedback submissions	Customer support, quality assurance, dispute resolution

phcah does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data (such as government ID details) is collected, it is handled with heightened security measures and access controls.

3. How We Collect Your Data

phcah collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, PayMaya, and participating Philippine banks.
• Regulatory sources: Data received from PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or investigation requirements.

4. How We Use Your Personal Data

phcah uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your phcah account, including identity verification and age confirmation (21+ requirement).
• Service delivery: Processing deposits and withdrawals, providing access to games, managing bonuses and promotions, and delivering customer support.
• Legal and regulatory compliance: Meeting our obligations under Philippine law, PAGCOR regulations, anti-money laundering (AML) requirements, and NPC data protection rules.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, and other security threats.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and applying responsible gaming tools where appropriate.
• Platform improvement: Analyzing usage data to improve the phcah Platform's performance, features, and user experience.
• Communications: Sending account-related notifications, security alerts, and — where you have opted in — promotional communications about phcah offers.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phcah processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the phcah Terms & Conditions, including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, PAGCOR regulations, AML obligations, and NPC requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing communications, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1 Service Providers

phcah may share your personal data with trusted third-party service providers who assist in operating the Platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, Philippine banks), IT infrastructure and cloud service providers, customer support platform providers, and fraud detection and AML screening services. All service providers are contractually bound to process your data only on phcah's instructions and in accordance with applicable data protection law.

6.2 Regulatory and Legal Disclosure

phcah may disclose your personal data to PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), law enforcement agencies, or courts of competent jurisdiction where required by Philippine law, a valid legal order, or regulatory obligation. phcah will notify you of such disclosures where legally permitted to do so.

6.3 No Sale of Data

phcah does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. Full stop.

7. Cookies & Tracking Technologies

phcah uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Essential cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Preference cookies: Store your Platform preferences such as language settings and display options to improve your experience on return visits.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from accessing certain features of the phcah Platform. phcah does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

8. Data Security

phcah implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and phcah servers.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls ensuring that phcah staff can only access personal data necessary for their specific job functions.
• Regular security audits, penetration testing, and vulnerability assessments of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While phcah takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, phcah will notify you and the NPC in accordance with applicable Philippine law.

9. Data Retention

phcah retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with PAGCOR and AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by Philippine AML regulations.
• Gaming history: Retained for a minimum of 3 years for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for 2 years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Technical and usage data: Retained in anonymized or aggregated form for analytics purposes; identifiable technical data is deleted within 12 months of collection.

Upon expiry of the applicable retention period, phcah will securely delete or anonymize your personal data in accordance with our data disposal procedures.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phcah:

To exercise any of the above rights, please contact phcah's Data Protection Officer through our support team. phcah will respond to all data rights requests within 15 business days of receipt. We may request proof of identity before processing your request to protect against unauthorized access to your data.

11. Children's Privacy & Age Restriction

The phcah Platform is strictly intended for individuals aged 21 years and above. phcah does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the phcah registration process, and we employ additional verification measures where there is any doubt about a player's age.

If phcah becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and refund any deposits made, subject to verification. If you believe that a minor has registered on phcah, please contact our support team immediately.

12. Changes to This Privacy Policy

phcah reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will notify registered players via email and/or a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how phcah protects your personal data. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or phcah's data processing practices, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the Philippine National Privacy Commission (NPC) if you are not satisfied with phcah's response to your data rights request. Information about the NPC and its complaint process is publicly available through official Philippine government channels.