phchas Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phchas ("phchas," "we," "us," "our"), the operator of the online gaming platform at phchas.org, collects, processes, stores, and discloses personal information relating to players and website visitors ("you," "your," "data subject"). This Policy applies to all personal data processed through the phchas Platform — including its website, mobile-optimised site, customer support channels, and any associated services.

phchas operates in the Philippines and is subject to the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the applicable issuances of the National Privacy Commission ("NPC"). By registering an account or using the phchas Platform, you consent to the collection and use of your personal data as described in this Policy.

2. Data Controller

phchas is the data controller responsible for the personal information collected through the phchas Platform. As data controller, phchas determines the purposes and means of processing personal data and is accountable for its protection in accordance with the DPA 2012.

phchas has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data privacy obligations and serving as the point of contact for data subjects and the National Privacy Commission.

3. Data We Collect

3.1 Registration & Identity Data

When you create a phchas account, we collect your full legal name, date of birth, Philippine mobile number, email address (if provided), and username. This data is required to establish your account and verify your eligibility to use the Platform.

3.2 KYC & Verification Documents

phchas may request government-issued identification documents — such as a Philippine National ID, passport, or driver's licence — and proof of ownership of your payment method (e.g., a screenshot of your GCash account showing your registered number) for KYC compliance. These documents are processed and retained in encrypted storage.

3.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, wagers, winnings, and bonus transactions processed through your phchas account. This includes GCash reference numbers, PayMaya transaction IDs, and bank transfer confirmations as applicable.

3.4 Device & Usage Data

phchas automatically collects technical data when you access the Platform, including your IP address, browser type and version, device type and operating system, pages visited, session duration, and referring URL. This data is used for fraud prevention, platform analytics, and service optimisation.

3.5 Communications Data

If you contact phchas support via live chat or email, we retain records of those communications — including the content of your messages, timestamps, and resolution outcomes — for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Use Your Data

phchas uses the personal data described above for the following purposes:

• Account Management: To create, verify, and maintain your phchas account, and to authenticate your identity at login.
• Service Delivery: To process deposits and withdrawals in PHP via GCash, PayMaya, BPI, BDO, and Metrobank; to deliver game services and calculate winnings; and to manage bonus and promotion entitlements.
• Regulatory Compliance: To conduct age verification (21+), KYC checks, and anti-money laundering (AML) screening as required by applicable Philippine gaming and financial regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multiple account registrations, and other prohibited conduct under the phchas Terms and Conditions.
• Responsible Gaming: To monitor gaming patterns and enforce player protection measures including deposit limits, self-exclusion, and account cooling-off periods.
• Customer Support: To respond to your enquiries, process complaints, and resolve disputes relating to your phchas account or gaming activity.
• Platform Improvement: To analyse aggregated usage data and improve the phchas Platform, including game offerings, payment flows, and mobile performance.
• Legal Obligations: To comply with court orders, regulatory requests, and reporting obligations under applicable Philippine law.

5. Legal Basis for Processing

phchas processes your personal data under one or more of the following lawful bases as recognised by the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary for the performance of the player agreement between you and phchas, including account management, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML obligations, gaming regulatory requirements, and tax reporting.
• Legitimate Interests: Processing for fraud prevention, platform security, dispute resolution, and service analytics, where these interests are not overridden by your privacy rights.
• Consent: For certain processing activities — such as sending promotional communications — phchas relies on your explicit consent, which you may withdraw at any time.

6. Sharing Your Data

phchas does not sell personal data to third parties. We share your data only in the following circumstances and with the following categories of recipients:

• Payment Processors: GCash (Mynt – Globe Fintech Innovations, Inc.), PayMaya (Maya Bank, Inc.), BPI, BDO, and Metrobank receive the transaction data necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party providers engaged by phchas to verify identity documents and conduct AML screening.
• Game Software Providers: Game studios and live casino operators whose games are hosted on phchas may receive session identifiers and wager data necessary to deliver game services and calculate outcomes.
• Fraud Prevention & Security Services: Service providers that assist phchas in detecting account fraud, unauthorised access, and prohibited conduct.
• Regulatory & Law Enforcement Authorities: Government agencies, the National Privacy Commission, gaming regulatory bodies, or law enforcement authorities where phchas is legally required to disclose information.
• Professional Advisors: Legal, audit, and compliance advisors engaged by phchas in connection with the operation of the Platform.

All third-party processors engaged by phchas are bound by data processing agreements that require them to process personal data only for the purposes specified by phchas and in accordance with applicable privacy law.

7. International Data Transfers

Some of the third parties with whom phchas shares data may operate servers or infrastructure located outside the Philippines. Where personal data is transferred internationally, phchas ensures that such transfers are subject to appropriate safeguards — including contractual data protection clauses — consistent with the requirements of the DPA 2012 and NPC guidelines. phchas does not transfer personal data to countries that lack adequate legal protections for personal information without implementing appropriate safeguards.

8. Data Retention

phchas retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in any case for a minimum of five (5) years following the closure or termination of a player account. This retention period reflects obligations under Philippine anti-money laundering regulations and gaming record-keeping requirements.

Transaction records, KYC documents, and account activity logs are retained for the minimum period required by applicable regulation. Communications data (support interactions) is retained for three (3) years. Technical and device data is retained for twelve (12) months. Following the expiry of applicable retention periods, phchas securely destroys or anonymises personal data.

9. Cookies & Tracking Technologies

9.1 Essential Cookies

phchas uses essential cookies that are strictly necessary for the operation of the Platform — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without impairing the functionality of the phchas service.

9.2 Analytics Cookies

phchas uses first-party analytics tools to collect aggregated, anonymised data about Platform usage — including page visits, session lengths, and feature engagement. This data is used to improve the phchas experience. Analytics cookies do not identify individual players.

9.3 No Third-Party Advertising Cookies

phchas does not deploy third-party advertising cookies or share player browsing data with advertising networks. No phchas player data is used for behavioural advertising or audience profiling by external parties.

10. Your Rights Under the Data Privacy Act of 2012

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by phchas:

• Right to be Informed: The right to know how phchas collects and processes your personal data — which this Policy fulfils.
• Right to Access: The right to request a copy of the personal data phchas holds about you and information about how it is processed.
• Right to Correction: The right to request that inaccurate, incomplete, or outdated personal data be corrected.
• Right to Erasure / Blocking: The right to request deletion or blocking of personal data where it is no longer necessary for the purposes it was collected, subject to phchas's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data where processing is based on legitimate interests, including the right to object to direct marketing.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used format where processing is carried out by automated means.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe phchas has processed your personal data in violation of the DPA 2012.

To exercise any of the rights above, please submit a written request to our Data Protection Officer at [email protected]. phchas will respond to all data rights requests within 15 business days of receipt.

11. Children's Privacy

phchas is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. If phchas becomes aware that personal data has been collected from a person under 21 without verifiable age confirmation, the relevant account will be immediately suspended and the data deleted or flagged for regulatory review. Parents or guardians who believe a minor has accessed the phchas Platform should contact us immediately at [email protected].

12. Security Measures

phchas implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. These include:

• SSL/TLS encryption for all data transmitted between your device and the phchas Platform;
• Encryption of stored personal data and KYC documents at rest using industry-standard protocols;
• Access controls limiting personal data access to authorised phchas personnel with a legitimate business need;
• Regular penetration testing, vulnerability scanning, and security audits of Platform infrastructure;
• Two-factor authentication available to all phchas account holders for enhanced account security;
• Automated fraud detection systems monitoring transaction and login activity in real time.

While phchas takes all reasonable steps to protect your personal data, no internet transmission is completely secure. You are also responsible for maintaining the security of your phchas login credentials and for notifying phchas promptly if you suspect unauthorised access to your account.

13. Changes to This Privacy Policy

phchas reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via the mobile number or email address on file, or by a prominent notice on the Platform, with at least seven (7) days' advance notice where practicable. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the phchas Platform following any amendment constitutes acceptance of the revised Policy.

14. Contact & Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phchas, please contact our Data Protection Officer:

Email (plain text): [email protected]

Support Hours: 8:00 AM – 12:00 MN (PHT), 7 days a week

If you are not satisfied with our response, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (privacy.gov.ph).