phcaah Privacy Policy

Introduction

phcaah ("phcaah," "we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you," "User," or "Player") of the phcaah online gaming platform, including all associated websites, mobile applications, and services (collectively, the "Platform").

This Privacy Policy ("Policy") describes how phcaah collects, uses, stores, shares, and protects your personal information when you access or use the Platform. It also explains your rights as a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines and its implementing rules and regulations.

By registering an account or using the phcaah Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read together with our Terms & Conditions, which govern your use of the phcaah Platform.

Personal Data We Collect

phcaah collects personal data that is necessary to provide you with a safe, compliant, and high-quality gaming experience. The categories of personal data we collect include:

2.1 Registration Data

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• Residential address (including city, province, and postal code)
• Email address
• Mobile phone number
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address documents
• Selfie or facial image for identity matching, where required
• Source of funds documentation, where required by anti-money laundering regulations

2.3 Financial Data

• Payment method details (e.g., GCash account reference, Maya account reference, bank account details for BPI, BDO, Metrobank, UnionBank, and other Philippine banks)
• Transaction history, including deposits, withdrawals, and wager records

2.4 Usage and Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited, features used, and session duration on the Platform
• Game history and betting activity
• Login timestamps and access logs

2.5 Communications Data

• Records of your communications with phcaah customer support
• Feedback, survey responses, and promotional opt-in preferences

How We Use Your Personal Data

phcaah uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your phcaah account, including verifying your identity and eligibility to use the Platform.
• Service Delivery: To provide you with access to all phcaah games, features, promotions, and customer support services.
• Payment Processing: To process deposits and withdrawals through your chosen payment method, including GCash, Maya, and Philippine bank transfers.
• Regulatory Compliance: To comply with our obligations under Philippine law, including the Anti-Money Laundering Act (AMLA), PAGCOR licensing requirements, and the Data Privacy Act of 2012.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming activity and identify players who may be at risk of gambling-related harm, and to enforce responsible gaming tools such as deposit limits and self-exclusion.
• Communications: To send you account-related notifications, security alerts, and — where you have opted in — promotional offers and platform updates.
• Platform Improvement: To analyze usage patterns and improve the performance, features, and user experience of the phcaah Platform.
• Dispute Resolution: To investigate and resolve complaints, disputes, or legal claims relating to your account or use of the Platform.

Legal Basis for Processing

phcaah processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your phcaah account and deliver the services you have requested.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including AMLA reporting obligations, PAGCOR licensing conditions, and tax requirements.
• Legitimate Interests: Processing is necessary for phcaah's legitimate interests in preventing fraud, ensuring platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending you marketing communications or using non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing and Disclosure

phcaah does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

5.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (such as GCash, Maya, and Philippine banking partners), identity verification providers, IT infrastructure and hosting providers, and customer support platforms. These providers are contractually bound to process your data only on phcaah's instructions and in accordance with applicable data protection law.

5.2 Regulatory and Law Enforcement Authorities

phcaah may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of phcaah's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

5.4 With Your Consent

We may share your data with other third parties where you have given your explicit consent to such sharing.

Cookies and Tracking Technologies

phcaah uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The types of cookies we use include:

• Essential Cookies: Strictly necessary for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with the Platform, helping us identify areas for improvement. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phcaah Platform. Detailed cookie information is available in our Cookie Notice, accessible from the Platform.

Data Retention

phcaah retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements.

Specifically:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Philippine financial record-keeping requirements.
• KYC Documents: Retained for the period required by applicable anti-money laundering regulations, typically five (5) years from the end of the business relationship.
• Communications: Customer support records are retained for up to three (3) years from the date of the last interaction.
• Marketing Data: Retained until you withdraw your consent or opt out of marketing communications.

When personal data is no longer required, phcaah will securely delete or anonymize it in accordance with our data disposal procedures.

Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phcaah:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which this Policy fulfills.
• Right of Access: The right to request a copy of the personal data phcaah holds about you.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

Data Security

phcaah implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest, including financial information and identity documents
• Role-based access controls limiting data access to authorized personnel only
• Regular security audits, vulnerability assessments, and penetration testing
• Multi-factor authentication for administrative access to systems containing personal data
• Staff training on data protection and information security best practices
• Incident response procedures for detecting, reporting, and managing data breaches

While phcaah takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying phcaah immediately if you suspect any unauthorized access to your account.

Children's Privacy

The phcaah Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. phcaah does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the phcaah Platform, please contact us immediately using the contact details in the footer of this page.

Changes to This Privacy Policy

phcaah reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will notify registered users via email or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is shown at the top of this page. We encourage you to review this Policy periodically to stay informed about how phcaah protects your personal data. Your continued use of the Platform after any changes to this Policy constitutes your acceptance of the updated terms.

Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phcaah, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) if you believe your data protection rights have been violated. Information about the NPC and its complaint procedures is publicly available through official Philippine government channels.