phpcom Privacy Policy

phpcom ("phpcom", "we", "us", "our") operates the online gaming platform accessible at phpcom.one, offering slots, live casino, sports betting, bingo, and related gaming services to registered users in the Philippines.

phpcom acts as the Personal Information Controller (as defined under the Philippine Data Privacy Act of 2012, Republic Act No. 10173) in respect of all personal data collected through the phpcom platform. This means phpcom determines the purposes and means by which your personal information is processed.

For all data privacy inquiries, the phpcom Data Protection Officer can be reached at the contact details provided in Section 14 of this Policy.

When you register and use the phpcom platform, we collect the following categories of personal data:

Identity and Contact Data:

• Full legal name as it appears on your Philippine government-issued ID;
• Date of birth (required to verify the 21+ age requirement);
• Philippine mobile number;
• Residential address in the Philippines;
• Email address (where provided);
• Government-issued ID number and ID document images (for KYC verification).

Financial Data:

• GCash account details (mobile number associated with GCash);
• PayMaya account details;
• Bank account details (for BPI, BDO, or Metrobank transfers);
• Deposit and withdrawal transaction history;
• Account balance history.

Gaming and Behavioural Data:

• Bet history, game session data, and wagering activity across all phpcom game categories;
• Bonus and promotion usage history;
• Login timestamps, session duration, and device information used to access phpcom;
• Customer support communication history.

Technical Data:

• IP address and approximate geographic location;
• Browser type, version, and operating system;
• Device identifiers and mobile network information;
• Cookie data and platform interaction logs (see Section 7).

phpcom collects personal data through the following means:

• Direct submission: Information you provide when registering a phpcom account, completing KYC verification, making deposits or withdrawals, or contacting phpcom support;
• Automated collection: Technical data collected automatically when you access phpcom.one, including IP address, device data, and browsing behaviour within the platform;
• Third-party sources: Identity verification data from KYC and anti-money laundering service providers; payment processing data from GCash, PayMaya, and banking partners; fraud detection data from security service providers;
• Regulatory sources: Information shared with phpcom by PAGCOR or other Philippine authorities as part of regulatory compliance obligations.

phpcom uses the personal data collected for the following purposes:

• Account registration and management: Creating and maintaining your phpcom account, verifying your identity and age (21+), and managing your account settings;
• Service delivery: Enabling you to play games, place bets, and use all features of the phpcom platform;
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency channels;
• Regulatory compliance: Meeting phpcom's obligations under PAGCOR licensing conditions, anti-money laundering laws, and the Philippine Data Privacy Act;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorized account access;
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling patterns and administering responsible gaming tools including self-exclusion;
• Customer support: Responding to your inquiries, resolving disputes, and communicating account-related notices;
• Platform improvement: Analysing aggregate usage data to improve the phpcom platform, game library, and user experience;
• Marketing communications: Sending promotional offers and bonus notifications to registered Players who have not opted out of marketing communications. You may opt out at any time through your account settings.

phpcom processes your personal data on the following legal bases under Republic Act No. 10173 (Data Privacy Act of 2012):

• Contractual necessity: Processing required to fulfil phpcom's obligations under the account agreement and these Terms, including account management, game delivery, and payment processing;
• Legal obligation: Processing required to comply with PAGCOR regulatory requirements, anti-money laundering legislation, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where phpcom's interests do not override your rights;
• Consent: Processing for direct marketing communications, where you have provided consent during registration or subsequently through account settings. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

phpcom does not sell your personal data to third parties. phpcom may share your personal data with the following categories of recipients under strictly limited circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency processing partners, solely for the purpose of processing your transactions;
• Identity verification providers: KYC and anti-money laundering service providers who verify your identity documents and assess fraud risk on phpcom's behalf;
• Game technology providers: Third-party game providers (such as live casino studio operators and slot developers) who may receive session data necessary to deliver the game service;
• Regulatory authorities: PAGCOR, the National Privacy Commission (NPC), and other Philippine government authorities where disclosure is required by law or regulatory order;
• Law enforcement: Philippine law enforcement agencies where phpcom is legally obligated to disclose information, such as in the investigation of money laundering or fraud;
• Professional advisors: Legal, accounting, and auditing firms engaged by phpcom, subject to professional confidentiality obligations.

Where phpcom engages third-party data processors, phpcom requires them to implement appropriate technical and organisational security measures and to process data only on phpcom's instructions and in accordance with applicable Philippine data privacy law.

phpcom uses cookies and similar tracking technologies on phpcom.one. Cookies are small text files stored on your device that help the platform function correctly and allow phpcom to improve your experience.

phpcom uses the following categories of cookies:

• Strictly necessary cookies: Essential to the operation of phpcom.one — these enable account login sessions, maintain your gaming session state, and allow the cashier to function. These cookies cannot be disabled;
• Performance and analytics cookies: Collect anonymised data about how Players use phpcom.one (pages visited, session duration, errors encountered) to help phpcom improve the platform;
• Functional cookies: Remember your preferences such as language settings and previously played games;
• Security cookies: Support fraud detection and help identify unusual login activity on your account.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of phpcom.one.

phpcom retains your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer.

• Active account data: Retained for the duration of your phpcom account and for five (5) years following account closure, in accordance with PAGCOR anti-money laundering retention requirements;
• Transaction records: Retained for a minimum of five (5) years following the transaction date;
• KYC documentation: Retained for five (5) years following account closure or the completion of the relevant verification process;
• Customer support records: Retained for two (2) years following the resolution of the relevant inquiry or complaint;
• Marketing data: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of the applicable retention period, phpcom will securely destroy or anonymise your personal data in accordance with its data disposal procedures.

phpcom implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS 256-bit encryption for all data transmitted between your device and phpcom servers;
• Encryption of sensitive data (passwords, financial account numbers) at rest using industry-standard algorithms;
• Access controls limiting phpcom staff access to personal data on a need-to-know basis;
• Two-factor authentication (OTP) for account login and withdrawal requests;
• Regular security assessments and penetration testing of platform infrastructure;
• Incident response procedures for personal data breaches, including mandatory reporting to the National Privacy Commission within seventy-two (72) hours of discovery of a breach affecting Players' rights and freedoms.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phpcom:

To exercise any of the above rights, submit a written request to the phpcom Data Protection Officer at the contact details in Section 14. phpcom will respond within fifteen (15) business days of receiving a valid, verifiable request.

If you are not satisfied with phpcom's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The phpcom platform may contain references to third-party services such as game providers and payment processors. phpcom is not responsible for the privacy practices of third-party services. This Privacy Policy applies solely to data collected and processed by phpcom through phpcom.one. We encourage you to review the privacy policies of any third-party services you access in connection with using phpcom.

phpcom reserves the right to update this Privacy Policy at any time. When material changes are made, phpcom will post the revised Policy on phpcom.one and update the "Last Updated" date at the top of this page. Where changes significantly affect your rights, phpcom will notify registered Players via their registered Philippine mobile number.

Continued use of the phpcom platform following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure in accordance with the phpcom Terms & Conditions.

For all data privacy inquiries, subject access requests, consent withdrawal, or complaints, you may contact phpcom's Data Protection Officer through the following channel:

phpcom's DPO will acknowledge receipt of your request within three (3) business days and provide a substantive response within fifteen (15) business days. Complex requests may take up to thirty (30) business days, in which case phpcom will notify you of the extended timeline.