phcaah Privacy Policy

1. Introduction and Scope

phcaah ("Company," "we," "us," "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy ("Policy") describes how we collect, use, disclose, store, and protect personal data obtained through the phcaah Platform located at phcaah.cam, including all associated mobile applications and services (collectively, the "Platform").

This Policy applies to all users of the phcaah Platform, including visitors, registered players, and former account holders. By accessing or using our Platform, creating an account, or providing personal information to phcaah, you acknowledge that you have read, understood, and agree to the data practices described in this Policy.

If you do not agree with the practices described in this Policy, you should not use the phcaah Platform or provide us with your personal information. For questions regarding this Policy or phcaah data practices, please contact our Data Protection Officer using the contact information provided in Section 12.

2. Information We Collect

phcaah collects various categories of personal information to provide, maintain, and improve our services, ensure platform security, comply with legal obligations, and enhance user experience. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register an account, use our services, or communicate with us, you voluntarily provide:

• Account Registration Data: Full legal name, date of birth, gender, residential address, mobile phone number, email address, username, and password.
• Identity Verification Documents: Government-issued identification (passport, driver's license, national ID), proof of address documents (utility bills, bank statements), and facial recognition images for KYC (Know Your Customer) compliance.
• Financial Information: Payment method details including GCash account information, PayMaya details, bank account numbers, credit/debit card information (processed through secure third-party payment processors), transaction history, deposit and withdrawal records.
• Communication Data: Information contained in correspondence with customer support, feedback, survey responses, promotional preferences, and marketing communications opt-ins or opt-outs.
• Responsible Gaming Data: Deposit limits, session time limits, loss limits, self-exclusion requests, and responsible gaming tool configurations you set through your account.

2.2 Information Collected Automatically

When you access or use the phcaah Platform, we automatically collect:

• Device Information: Device type, operating system and version, browser type and version, device identifiers (IMEI, MAC address, device ID), screen resolution, language settings.
• Usage Data: IP address, geolocation data (country, region, city), login times and session duration, games played, bet amounts and outcomes, pages viewed, links clicked, features used, navigation paths through the Platform.
• Technical Data: Cookie identifiers, pixel tags, log files, error reports, performance data, software version information, API interactions.
• Gameplay Records: Complete records of all gaming activity including bets placed, games played, results, bonuses claimed, winnings, and losses for regulatory compliance and dispute resolution.

2.3 Information from Third Parties

We may receive information about you from:

• Payment Processors: Transaction verification, payment confirmation, fraud detection signals from GCash, PayMaya, banks, and other payment service providers.
• Identity Verification Services: Identity validation, age verification, address verification, sanctions screening, and anti-money laundering (AML) checks from third-party verification providers.
• Game Providers: Gameplay data, game outcomes, technical performance metrics from licensed third-party game software providers integrated into our Platform.
• Fraud Prevention Services: Risk scores, fraud indicators, device fingerprinting data, and behavioral analytics from specialized fraud detection and prevention partners.
• Affiliate Partners: Referral source information and marketing campaign attribution data from authorized phcaah affiliates and marketing partners.

3. How We Use Your Personal Data

phcaah processes your personal information for specific, legitimate purposes in accordance with applicable data protection laws. We use collected data for the following purposes:

3.1 Service Provision and Account Management

• Create, maintain, and manage your phcaah account
• Process and authenticate user login credentials
• Enable access to gaming services, sports betting, and casino games
• Process deposits, withdrawals, and other financial transactions
• Provide customer support and respond to inquiries
• Deliver account notifications, transaction confirmations, and service updates
• Administer bonuses, promotions, and loyalty rewards

3.2 Regulatory Compliance and Legal Obligations

• Verify your identity and age to comply with legal age restrictions (21+ requirement)
• Conduct Know Your Customer (KYC) and Enhanced Due Diligence (EDD) procedures
• Perform anti-money laundering (AML) and counter-terrorism financing (CTF) checks
• Comply with PAGCOR regulations and gaming license requirements
• Maintain records required by Philippine gaming authorities and tax authorities
• Respond to lawful requests from law enforcement, regulators, and courts
• Investigate and report suspicious transactions or illegal activity

3.3 Platform Security and Fraud Prevention

• Detect, prevent, and investigate fraudulent activity, bonus abuse, and rule violations
• Monitor for unauthorized account access and suspicious login patterns
• Identify and block multiple accounts, collusion, and coordinated abuse
• Protect against cybersecurity threats, hacking attempts, and system vulnerabilities
• Enforce our Terms and Conditions and resolve disputes
• Maintain audit trails and transaction logs for security analysis

3.4 Responsible Gaming and Player Protection

• Implement and enforce responsible gaming tools (deposit limits, self-exclusion)
• Monitor gameplay patterns for signs of problem gambling behavior
• Provide reality checks and session time limit notifications
• Support responsible gaming interventions and account restrictions
• Comply with mandatory self-exclusion registers where applicable

3.5 Service Improvement and Analytics

• Analyze Platform usage patterns to improve user experience
• Conduct A/B testing and feature optimization
• Develop new games, features, and services based on user preferences
• Generate statistical and aggregated data for business intelligence
• Optimize Platform performance, loading times, and technical reliability

3.6 Marketing and Communications (with Consent)

• Send promotional offers, bonus notifications, and marketing communications via email, SMS, or push notifications (only with your explicit opt-in consent)
• Personalize promotional content based on your gaming preferences and activity
• Conduct market research and customer satisfaction surveys
• Deliver targeted advertising through our Platform and partner networks

You may opt out of marketing communications at any time through your account settings, unsubscribe links in emails, or by contacting customer support. Opting out will not affect transactional or service-related communications necessary for your account.

4. Data Sharing and Third-Party Disclosure

phcaah does not sell your personal information to third parties. We share your data only in the following limited circumstances and with appropriate safeguards:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers who process personal data on our behalf under strict confidentiality and data protection obligations:

• Payment Processors: GCash, PayMaya, banks, and payment gateways to process deposits and withdrawals
• Game Providers: Licensed software providers who supply casino games, live dealer services, and sports betting platforms
• Identity Verification Services: KYC/AML compliance providers who verify identity documents and perform background checks
• Cloud Infrastructure Providers: Secure hosting and data storage providers who maintain our servers and databases
• Customer Support Platforms: Live chat and helpdesk software providers who assist in delivering support services
• Marketing and Analytics Services: Email service providers, analytics platforms, and advertising networks (only with your consent for marketing purposes)
• Fraud Prevention Services: Specialized security providers who help detect and prevent fraudulent activity

All service providers are contractually bound to process data only according to our instructions, maintain appropriate security measures, and comply with applicable data protection laws. We conduct due diligence on all service providers before engagement.

4.2 Regulatory Authorities and Legal Compliance

We disclose personal information to government authorities, regulators, and law enforcement when legally required or permitted:

• Philippine Amusement and Gaming Corporation (PAGCOR) and other gaming regulators
• Anti-Money Laundering Council (AMLC) for suspicious transaction reporting
• Bureau of Internal Revenue (BIR) for tax compliance
• Law enforcement agencies in response to valid legal requests, subpoenas, or court orders
• National Privacy Commission in response to data privacy complaints or investigations

4.3 Business Transfers

If phcaah undergoes a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the successor entity as part of the transaction. You will be notified via email and/or prominent notice on our Platform of any change in ownership or control of your personal information.

4.4 Affiliates and Corporate Structure

We may share information with affiliated companies within the phcaah corporate group for internal business purposes including centralized data processing, consolidated reporting, shared customer support, and group-wide fraud prevention. All affiliates are bound by equivalent data protection obligations.

4.5 With Your Consent

We may share your information with third parties when you provide explicit consent for specific purposes, such as participating in partner promotions, entering tournaments hosted by third parties, or connecting with social media platforms.

5. Cookies and Tracking Technologies

phcaah uses cookies, web beacons, pixels, local storage, and similar technologies to enhance user experience, analyze Platform usage, remember preferences, and deliver personalized content.

5.1 Types of Cookies We Use

Cookie Type	Purpose	Retention Period
Strictly Necessary	Essential for Platform functionality, login authentication, session management, and security. Cannot be disabled.	Session / Up to 30 days
Performance & Analytics	Collect anonymous usage statistics, page views, error tracking to improve Platform performance.	Up to 2 years
Functionality	Remember your preferences (language, timezone, display settings) for enhanced experience.	Up to 1 year
Marketing & Advertising	Track marketing campaign effectiveness, deliver personalized ads, retargeting. Requires consent.	Up to 1 year

5.2 Third-Party Cookies

Our Platform uses third-party cookies from service providers including Google Analytics (usage analysis), Facebook Pixel (advertising tracking), and game provider cookies (gameplay functionality). These third parties have their own privacy policies governing their data collection and use.

5.3 Managing Cookie Preferences

You can control cookie settings through:

• Browser Settings: Most browsers allow you to block or delete cookies through settings. Note that blocking essential cookies may impair Platform functionality.
• Cookie Consent Manager: Adjust your cookie preferences through our cookie consent tool accessible in your account settings.
• Opt-Out Tools: Use industry opt-out tools like the Digital Advertising Alliance's opt-out page for advertising cookies.

Mobile app users can control tracking through device settings: iOS users via "Limit Ad Tracking" and Android users via "Opt out of Ads Personalization."

6. Data Security Measures

phcaah implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. While we strive to use commercially acceptable means to protect your data, no method of transmission or storage is 100% secure.

6.1 Technical Security Controls

• Encryption: All data transmissions use industry-standard SSL/TLS encryption (minimum TLS 1.2). Sensitive data at rest is encrypted using AES-256 encryption.
• Secure Infrastructure: Servers are hosted in certified data centers with physical security controls, redundant systems, and 24/7 monitoring.
• Access Controls: Role-based access control (RBAC) ensures employees can only access data necessary for their job functions. Multi-factor authentication required for administrative access.
• Network Security: Firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and DDoS protection safeguard our network infrastructure.
• Vulnerability Management: Regular security assessments, penetration testing, and vulnerability scans identify and remediate security weaknesses.
• Logging and Monitoring: Comprehensive audit logs track data access and system events. Automated alerts detect suspicious activity.

6.2 Organizational Security Measures

• Employee confidentiality agreements and data protection training
• Background checks for employees with access to sensitive data
• Incident response procedures and data breach notification protocols
• Regular security policy reviews and updates
• Third-party security audits and compliance certifications
• Data minimization and privacy-by-design principles in system development

6.3 Your Security Responsibilities

You are responsible for maintaining the confidentiality of your account credentials. We recommend:

• Using strong, unique passwords combining letters, numbers, and symbols
• Enabling two-factor authentication when available
• Never sharing your password with others
• Logging out after each session, especially on shared devices
• Immediately notifying us of any unauthorized account access
• Keeping your registered email and phone number secure and up to date

7. Data Retention Policy

phcaah retains personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

7.1 Retention Periods by Data Category

• Account Data: Retained for the duration of your active account plus 7 years after account closure to comply with regulatory record-keeping requirements.
• Transaction Records: Financial transaction history retained for 10 years to comply with anti-money laundering and tax regulations.
• Gameplay Records: Gaming activity logs retained for 7 years to comply with PAGCOR regulations and enable dispute resolution.
• Identity Verification Documents: KYC documents retained for 5 years after the end of the business relationship as required by AML regulations.
• Marketing Communications: Email and SMS marketing records retained until you withdraw consent or 3 years from last engagement, whichever is earlier.
• Support Communications: Customer support chat logs and email correspondence retained for 3 years for quality assurance and dispute resolution.
• Self-Exclusion Records: Self-exclusion data retained indefinitely to prevent circumvention and protect vulnerable players.

7.2 Data Deletion

Upon expiration of applicable retention periods, personal data is securely deleted or anonymized. Anonymized data may be retained indefinitely for statistical analysis. You may request earlier deletion of certain data categories subject to our legal retention obligations (see Section 8 on Your Privacy Rights).

8. Your Privacy Rights

Under the Philippine Data Privacy Act and international data protection standards, you have the following rights regarding your personal information:

8.1 Right to Access

You have the right to request confirmation of what personal data we hold about you and obtain a copy of that data. You can access most of your account information directly through your account dashboard. For additional information, submit a data access request through our Data Protection Officer.

8.2 Right to Rectification

You can update or correct inaccurate or incomplete personal information through your account settings. For information you cannot modify yourself (such as verified identity documents), contact customer support with supporting documentation.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent (where consent is the legal basis for processing)
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

Note that we may be unable to delete data we are legally required to retain (e.g., for AML compliance, tax obligations, or ongoing legal proceedings).

8.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible.

8.5 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time (opt-out). You can also object to processing based on legitimate interests by providing specific reasons relating to your particular situation.

8.6 Right to Restrict Processing

You may request restriction of processing when:

• You contest the accuracy of the data (restriction during verification)
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification of legitimate grounds

8.7 Right to Withdraw Consent

Where we process data based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

8.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] or through your account settings. We will respond to verified requests within 30 days. Identity verification may be required to protect against unauthorized data disclosure. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

9. International Data Transfers

phcaah primarily operates within the Philippines, but some service providers and technology infrastructure may be located in other countries. When we transfer personal data outside the Philippines, we ensure appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries recognized by the National Privacy Commission as providing adequate data protection.
• Standard Contractual Clauses: Use of model contract clauses approved by data protection authorities to govern international transfers.
• Binding Corporate Rules: Internal policies ensuring equivalent data protection across our corporate group.
• Service Provider Agreements: Contractual obligations requiring international service providers to implement appropriate technical and organizational security measures.

Countries where data may be transferred include but are not limited to: Singapore (cloud infrastructure), European Union member states (payment processing), and United States (analytics and support services). All transfers comply with Chapter V of the Data Privacy Act and its implementing regulations.

10. Children's Privacy

phcaah does not knowingly collect, use, or disclose personal information from individuals under 21 years of age. Use of the phcaah Platform is strictly prohibited for minors. Our age verification procedures are designed to prevent underage access.

If we discover that we have inadvertently collected information from a minor, we will promptly delete that information from our systems and terminate the associated account. Parents or guardians who believe their child has provided information to phcaah should immediately contact our Data Protection Officer at [email protected].

We encourage parents and guardians to monitor their children's internet usage and to help enforce this Policy by instructing children never to provide personal information to online gambling sites.

11. Changes to This Privacy Policy

phcaah reserves the right to modify or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the beginning of this Policy
• Notify you via email to your registered email address
• Display a prominent notice on the Platform homepage
• For significant changes affecting your rights, request renewed consent where required by law

Your continued use of the phcaah Platform after changes take effect constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically. The current version is always available at phcaah.cam/privacy-policy.

12. Contact Information and Complaints

12.1 Data Protection Officer

For privacy-related inquiries, data subject rights requests, or concerns about our data practices, contact our Data Protection Officer:

phcaah Data Protection Officer
Email: [email protected]
Response Time: Within 5 business days for initial acknowledgment
Complete Response: Within 30 days for data subject rights requests

12.2 Customer Support

For general account inquiries or non-privacy questions:

Email: [email protected]
Live Chat: Available 24/7 on phcaah.cam
Phone: +63 (2) 8XXX-XXXX (Business hours: 9 AM - 6 PM PHT, Monday-Friday)

12.3 Filing a Complaint

If you believe phcaah has violated your privacy rights or data protection laws, you have the right to file a complaint with:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC),
Vicente Sotto St., Pasay City, Metro Manila 1307, Philippines
Email: [email protected]
Complaint Hotline: (02) 8234-2228
Website: privacy.gov.ph

You also have the right to lodge a complaint with the data protection authority in your country of residence if you are located outside the Philippines.