phcah Privacy Policy

1. Who We Are

phcah ("we," "us," "our") is an online casino and sports betting platform operating at phcah.org, licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). phcah is the data controller responsible for the personal data of players and visitors collected through the platform.

This Privacy Policy applies to all personal data collected from players, prospective players, and website visitors in connection with their use of phcah's services, website, and any associated communication channels including live chat and email support.

For any data privacy inquiries, please contact our Data Protection Officer (DPO) at: [email protected]. We aim to respond to all privacy-related queries within five (5) business days.

2. Personal Data We Collect

phcah collects personal data that is necessary for the provision of our gaming services, regulatory compliance, and the security of our platform. The categories of data we collect include:

phcah does not collect sensitive personal information (as defined under Philippine law) beyond what is strictly required for identity verification and regulatory compliance purposes.

3. How We Collect Your Data

phcah collects personal data through the following means:

• Directly from you: When you register a phcah account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a promotional communication.
• Automatically: When you visit or use the phcah platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies.
• From third parties: We may receive data from identity verification service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention services, and PAGCOR as part of our licensing and compliance obligations.

4. How We Use Your Personal Data

phcah uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your phcah account, verify your identity and age (21+), and maintain your account in good standing.
• Service delivery: To provide access to gaming services, process bets and game rounds, manage your phcah wallet, and facilitate deposits and withdrawals via GCash, PayMaya, and bank transfer.
• Regulatory compliance: To fulfil our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act of the Philippines (AMLA), and the Data Privacy Act of 2012 (Republic Act 10173), including KYC, transaction monitoring, and reporting.
• Responsible gaming: To operate responsible gaming tools including deposit limits, session alerts, cooling-off periods, and self-exclusion features that protect players from potential gambling harm.
• Security and fraud prevention: To detect and prevent unauthorized account access, fraudulent transactions, bonus abuse, and other prohibited conduct on the phcah platform.
• Customer support: To handle inquiries, complaints, and dispute resolution through our live chat and email support channels.
• Marketing communications: To send promotional offers, platform updates, and bonus notifications to players who have opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyze usage patterns and improve the phcah platform's performance, features, and user experience.

phcah does not use personal data for automated decision-making that produces significant legal effects without human oversight, except where required by applicable law.

5. Legal Basis for Processing

phcah processes personal data in accordance with the Data Privacy Act of 2012 (Republic Act 10173) and its implementing rules. Our legal bases for processing are as follows:

• Contractual necessity: Processing required to perform our obligations under the phcah Terms & Conditions, including account management, gaming service delivery, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, tax reporting requirements, and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming, where such interests are not overridden by the player's privacy rights.
• Consent: Processing for direct marketing communications, optional analytics, and non-essential cookies, where you have provided explicit, informed consent. Consent may be withdrawn at any time.

6. Data Sharing & Disclosure

phcah does not sell, rent, or trade personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive the data necessary to process your transactions securely. These providers are bound by their own privacy obligations.
• Identity verification providers: Third-party KYC and identity verification services process identity documents and verification data on behalf of phcah for age verification and fraud prevention.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities may receive data as required by law, court order, or regulatory directive.
• Game providers: Licensed game studios (such as JILI, PG Soft, Pragmatic Play, and Evolution Gaming) receive limited technical data necessary to deliver game sessions. These providers operate under their own data protection frameworks.
• Technology service providers: Cloud hosting, cybersecurity, analytics, and customer support platform providers who process data strictly on phcah's behalf under data processing agreements.

All third parties with whom phcah shares personal data are contractually required to process that data lawfully, securely, and solely for the purposes specified by phcah. phcah does not transfer personal data outside the Philippines except where adequate data protection standards are ensured.

7. Cookies & Tracking Technologies

phcah uses cookies and similar tracking technologies on its platform. These help us deliver a secure, functional, and personalized experience for Filipino players.

• Essential cookies: Required for core platform functionality including login sessions, wallet management, and game delivery. These cannot be disabled without impairing the phcah service.
• Security cookies: Used for fraud detection, session management, and protection against cross-site request forgery (CSRF). These are mandatory for platform security.
• Analytics cookies: Help phcah understand how players use the platform so we can improve the experience. These are activated only with your consent.
• Preference cookies: Remember your language settings, display preferences, and other customizations. Activated with your consent.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the phcah platform, though some personalization features may be unavailable.

8. Data Retention

phcah retains personal data for as long as is necessary for the purpose for which it was collected and to comply with applicable legal obligations. Specifically:

• Active account data: Retained for the duration of your phcah account and for a period of five (5) years after account closure, as required under PAGCOR licensing and AMLA regulations.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC and identity documents: Retained for five (5) years after account closure or the last transaction, whichever is later.
• Support communications: Retained for two (2) years from the date of the interaction, unless subject to an ongoing dispute or regulatory inquiry.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period for record-keeping.

After the applicable retention period, phcah will securely delete or anonymize personal data in accordance with its data disposal procedures.

9. Security Measures

phcah implements a comprehensive set of technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the phcah platform.
• Encrypted data storage for sensitive personal and financial data at rest.
• Two-factor authentication (2FA) available to all phcah account holders for enhanced login security.
• Real-time fraud detection and anomaly monitoring systems that flag suspicious account activity immediately.
• Access controls: phcah staff access to personal data is strictly limited on a need-to-know basis, with audit logging of all data access events.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.

While phcah takes all reasonable precautions to protect your data, no system is entirely impenetrable. In the event of a personal data breach that poses a risk to your rights, phcah will notify affected players and the National Privacy Commission (NPC) in accordance with its obligations under the Data Privacy Act of 2012.

10. Your Data Rights

Under the Data Privacy Act of 2012 (Republic Act 10173), phcah players have the following rights with respect to their personal data:

• Right to be informed: The right to know what personal data phcah collects about you, and how it is used – which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data phcah holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of personal data where retention is no longer legally required or justified. This right is subject to our legal retention obligations under PAGCOR and AMLA.
• Right to object: The right to object to processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phcah has not handled your personal data in accordance with applicable law.

To exercise any of these rights, please contact phcah's Data Protection Officer at [email protected]. phcah will respond to all verified data rights requests within fifteen (15) business days.

11. Children's Privacy & Age Restriction

phcah's gaming services are strictly restricted to individuals who are 21 years of age or older, consistent with PAGCOR regulations governing online gambling in the Philippines. phcah does not knowingly collect personal data from individuals under 21 years of age.

Age verification is mandatory during the phcah account registration process. If phcah becomes aware that an account has been created by or is being used by an individual under the age of 21, the account will be immediately suspended, all real-money balances will be subject to return procedures, and any personal data collected from the underage individual will be deleted.

If you believe that a minor has created a phcah account, please contact our support team immediately at [email protected].

12. Changes to This Privacy Policy

phcah reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, phcah will notify registered players via the email address on file and display a prominent notice on the phcah platform for a period of at least 30 days before the changes take effect.

The effective date at the top of this document reflects when this version of the Privacy Policy came into force. Continued use of the phcah platform following notification of changes constitutes acceptance of the updated Privacy Policy.

This Privacy Policy was last reviewed and updated on 1 June 2026.

13. Contact & Data Privacy Complaints

For any questions, concerns, or requests regarding this Privacy Policy or phcah's data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 on the phcah platform.

If you are not satisfied with phcah's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.