phaa Casino Privacy Policy

1. Introduction and Scope

phaa Casino is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and protect personal data you provide when registering for an account, using our gaming platform, or interacting with our customer support services. By creating an account or using phaa Casino services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

This Privacy Policy applies to all users of phaa Casino services, including visitors to our website, registered players, and individuals who contact our customer support. It covers personal data collected through our website, mobile applications (if applicable), customer service channels, and any other interaction you have with phaa Casino. This policy should be read in conjunction with our Terms and Conditions, which govern your use of phaa Casino services.

phaa Casino operates under licenses and regulations established by the Philippine Amusement and Gaming Corporation (PAGCOR) and complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. As a data controller, phaa Casino determines the purposes and means of processing your personal data and implements appropriate technical and organizational measures to ensure data security and privacy.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for a phaa Casino account, we collect personal information necessary to create and maintain your account, verify your identity, process transactions, and comply with legal obligations. This information includes:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, gender, nationality, and citizenship status.
• Contact Information: Residential address including street, city, province, postal code, email address, and mobile phone number registered in your name.
• Financial Information: Payment method details including GCash account name and number, Maya account information, bank account details for deposits and withdrawals, and transaction history on our platform.
• Verification Documents: Copies of government-issued photo identification (passport, driver's license, Philippine National ID), proof of address documents (utility bills, bank statements dated within three months), and in some cases, photographs for facial verification or proof of payment method ownership.
• Account Credentials: Username, password (stored in encrypted form), security questions and answers, and any other authentication information you provide for account security.
• Communication Records: Content of messages, emails, and chat transcripts when you contact customer support, participate in promotions, or communicate with phaa Casino through any channel.

2.2 Information Collected Automatically

When you access phaa Casino's website or use our services, we automatically collect technical information about your device, connection, and usage patterns. This data helps us improve service quality, detect fraud, and enhance user experience. Automatically collected information includes:

• Device Information: Device type (desktop, mobile, tablet), operating system and version, browser type and version, screen resolution, device identifiers, and hardware specifications.
• Connection Data: IP address, internet service provider, approximate geographic location based on IP address, connection timestamps, and session duration.
• Usage Information: Pages visited, features accessed, games played, bet history, deposit and withdrawal activity, time spent on platform, click patterns, navigation paths, and interaction with promotional content.
• Cookies and Tracking Technologies: Cookie identifiers, session tokens, local storage data, and similar technologies used to maintain session state, remember preferences, and analyze platform usage. Detailed information about our use of cookies is provided in Section 8 of this Privacy Policy.
• Anti-Fraud Data: Device fingerprints, behavioral biometrics, anomaly detection signals, and other technical identifiers used to prevent fraud, detect multiple accounts, and ensure platform security.

2.3 Information from Third-Party Sources

In certain circumstances, phaa Casino may collect information about you from third-party sources to verify your identity, validate payment methods, comply with regulatory requirements, or detect fraudulent activity. Third-party sources may include:

• Payment processors and financial institutions that verify transaction authenticity and account ownership.
• Identity verification services that confirm the accuracy of information you provide and detect identity fraud.
• Credit reference agencies (where legally permitted) to assess financial standing for responsible gaming purposes.
• Publicly available databases including business registries, public records, and social media profiles you have made public (only when necessary for verification or fraud prevention).
• PAGCOR's self-exclusion registry to ensure compliance with responsible gaming requirements and prevent access by self-excluded individuals.

3. How We Use Your Information

3.1 Account Management and Service Delivery

phaa Casino uses your personal information to create and maintain your account, provide access to gaming services, process your requests, and deliver the core functionality of our platform. Specific uses include:

• Creating, maintaining, and authenticating your phaa Casino account and ensuring secure access through password protection and two-factor authentication where enabled.
• Processing deposits, managing your account balance, processing withdrawal requests, and maintaining accurate financial records of all transactions.
• Providing access to casino games, sports betting markets, live dealer tables, and other gaming content available on our platform.
• Responding to customer support inquiries, resolving technical issues, investigating complaints, and providing assistance through live chat, email, and other communication channels.
• Sending transactional communications including deposit confirmations, withdrawal notifications, account verification requests, security alerts, and other essential service messages.

3.2 Legal Compliance and Regulatory Obligations

As a PAGCOR-licensed operator, phaa Casino is subject to extensive regulatory requirements regarding player verification, responsible gaming, anti-money laundering, and financial reporting. We use your personal information to:

• Verify your identity, age, and eligibility to participate in online gaming activities in accordance with Philippine law requiring players to be at least twenty-one (21) years of age.
• Comply with Know Your Customer (KYC) and Customer Due Diligence (CDD) requirements mandated by PAGCOR and anti-money laundering regulations.
• Detect and prevent money laundering, terrorist financing, fraud, and other illegal activities by monitoring transactions, analyzing betting patterns, and reporting suspicious activity to relevant authorities.
• Maintain records required by PAGCOR and other regulatory bodies, including transaction logs, game outcomes, player communications, and compliance documentation.
• Enforce responsible gaming measures including deposit limits, self-exclusion programs, and identification of problem gambling indicators.
• Respond to legal requests, court orders, subpoenas, and regulatory inquiries from PAGCOR, National Privacy Commission, law enforcement agencies, and other authorized government bodies.

3.3 Fraud Prevention and Security

Protecting our platform and users from fraud, abuse, and security threats is a critical priority. We use personal information and technical data to:

• Detect and prevent creation of multiple accounts (multi-accounting), which violates our Terms and Conditions and is often associated with bonus abuse or fraudulent activity.
• Identify suspicious betting patterns, collusion between players, use of automated betting software (bots), and other forms of advantage play or cheating.
• Monitor for credit card fraud, stolen payment credentials, identity theft, and unauthorized account access by analyzing transaction patterns and device characteristics.
• Implement security measures including IP blocking, device banning, account freezing, and other protective actions when fraud or security threats are detected.
• Maintain audit trails and forensic evidence for investigation of security incidents, fraudulent activity, and disputes.

3.4 Marketing and Promotional Communications

With your consent, phaa Casino may use your contact information to send marketing communications about new games, special promotions, bonus offers, tournaments, and other content that may interest you. Marketing uses include:

• Sending email newsletters featuring new game launches, upcoming events, exclusive bonuses, and personalized offers based on your gaming preferences and activity.
• Delivering SMS notifications about time-sensitive promotions, flash bonuses, and special offers (only if you have provided explicit consent for SMS marketing).
• Displaying personalized promotional content on the phaa Casino website and within your account dashboard based on your gaming history and preferences.
• Conducting market research, player surveys, and feedback requests to improve our services and understand player preferences.

You can opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails, adjusting notification preferences in your account settings, or contacting customer support. Opting out of marketing does not affect transactional communications necessary for account management and service delivery.

3.5 Platform Improvement and Analytics

phaa Casino analyzes usage data to improve platform performance, enhance user experience, optimize game offerings, and develop new features. Analytics uses include:

• Analyzing game popularity, player preferences, betting patterns, and engagement metrics to optimize game selection and platform features.
• Monitoring platform performance including page load times, error rates, system uptime, and technical issues to maintain service quality.
• Conducting A/B testing of new features, user interface changes, and promotional campaigns to optimize user experience and engagement.
• Generating aggregated and anonymized statistics about platform usage, player demographics, and gaming trends for business intelligence purposes.

4. Legal Basis for Processing Personal Data

Under the Philippine Data Privacy Act, phaa Casino processes your personal data based on one or more of the following legal grounds:

• Consent: You have provided explicit, informed, and freely given consent for specific processing activities, particularly for marketing communications, optional features, and uses beyond core service delivery.
• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under the Terms and Conditions, including account creation, transaction processing, and service delivery.
• Legal Obligation: Processing is required to comply with legal obligations imposed by PAGCOR regulations, the Philippine Data Privacy Act, anti-money laundering laws, tax reporting requirements, and other applicable Philippine and international laws.
• Legitimate Interests: Processing is necessary for legitimate business interests pursued by phaa Casino, such as fraud prevention, security maintenance, platform improvement, and business analytics, provided such interests are not overridden by your fundamental rights and freedoms.
• Protection of Vital Interests: In rare circumstances, processing may be necessary to protect your vital interests or those of another person, such as responding to emergency situations or threats to life or health.

5. Data Sharing and Disclosure

5.1 Service Providers and Business Partners

phaa Casino works with trusted third-party service providers who assist in delivering our services, processing payments, maintaining platform infrastructure, and supporting business operations. We share personal information with service providers only to the extent necessary for them to perform their functions. These providers include:

• Payment Processors: GCash, Maya, banking partners, and other payment service providers that facilitate deposits, withdrawals, and financial transactions. These providers process payment information in accordance with their own privacy policies and industry security standards.
• Game Providers: Software developers including JILI, Pragmatic Play, Evolution Gaming, and others who supply casino games, sports betting platforms, and live dealer services. Game providers may collect limited technical data necessary for game operation and RNG certification.
• Identity Verification Services: Third-party KYC and identity verification providers that validate your identification documents, verify address information, and screen against sanctions lists and fraud databases.
• Cloud Service Providers: Technology partners that host our platform infrastructure, store data securely, provide content delivery networks, and maintain backup systems.
• Customer Support Tools: Live chat software, help desk systems, and customer relationship management platforms that enable efficient support delivery and communication tracking.
• Marketing and Analytics Partners: Email delivery services, analytics platforms, and advertising partners that help us deliver promotional content and analyze platform performance (subject to your consent where required).

All service providers are contractually obligated to maintain confidentiality, use personal data only for specified purposes, implement appropriate security measures, and comply with applicable data protection laws. phaa Casino conducts due diligence on service providers and regularly monitors their compliance with data protection obligations.

5.2 Regulatory and Law Enforcement Disclosure

phaa Casino may disclose personal information to regulatory authorities, law enforcement agencies, and other government bodies when required by law or when necessary to protect legal rights and comply with regulatory obligations:

• Providing player information, transaction records, and compliance documentation to PAGCOR in response to regulatory audits, investigations, or routine oversight activities.
• Reporting suspicious transactions, money laundering concerns, or potentially illegal activity to the Anti-Money Laundering Council (AMLC) and other appropriate authorities.
• Responding to valid legal requests including subpoenas, court orders, search warrants, and other legally binding demands from Philippine courts and law enforcement agencies.
• Cooperating with the National Privacy Commission regarding data protection inquiries, complaints, or investigations.
• Sharing information with tax authorities to comply with tax reporting obligations under Philippine law.

5.3 Business Transfers

In the event phaa Casino undergoes a business transition such as merger, acquisition, corporate restructuring, sale of assets, or bankruptcy proceeding, personal information may be transferred to successor entities or acquiring parties. In such circumstances, we will provide notice before personal data is transferred and becomes subject to a different privacy policy. Successor entities will be obligated to handle personal data in accordance with this Privacy Policy unless you are notified otherwise and given an opportunity to opt out.

5.4 With Your Consent

phaa Casino may share personal information with third parties not described above when you have provided explicit consent for such sharing. For example, if you choose to participate in co-branded promotions with third-party partners or opt into special programs that involve data sharing, we will obtain your informed consent before disclosing your information.

6. Data Retention

phaa Casino retains personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, and maintain accurate business records. Specific retention periods include:

• Active Accounts: Personal information associated with active accounts is retained throughout the duration of your relationship with phaa Casino and for a period following account closure as required by regulatory obligations.
• Closed Accounts: After voluntary account closure, personal data is retained for a minimum of five (5) years as required by PAGCOR regulations and anti-money laundering laws. This retention period allows phaa Casino to respond to legal inquiries, resolve disputes, and maintain required audit trails.
• Transaction Records: Financial transaction records, game play logs, and bet history are retained for at least five (5) years following the transaction date in compliance with PAGCOR record-keeping requirements and Philippine tax laws.
• Verification Documents: Copies of identification documents and KYC records are retained for five (5) years following account closure or the last verification activity, whichever is later.
• Communications: Customer support transcripts, emails, and other communications are typically retained for three (3) to five (5) years to maintain service quality, resolve disputes, and comply with regulatory requirements.
• Marketing Preferences: Records of consent for marketing communications and opt-out requests are retained indefinitely to ensure we respect your preferences and can demonstrate compliance with data protection laws.

After applicable retention periods expire, personal information is securely deleted or anonymized so that it can no longer identify you. Anonymized data may be retained indefinitely for statistical, research, and business intelligence purposes.

7. Data Security

phaa Casino implements comprehensive technical, organizational, and administrative security measures to protect personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Encryption: All data transmitted between your device and phaa Casino servers is encrypted using industry-standard TLS/SSL protocols. Sensitive data stored on our systems, including passwords and financial information, is encrypted at rest using advanced encryption algorithms.
• Access Controls: Access to personal data is restricted to authorized personnel who require such access to perform their job functions. Role-based access controls, multi-factor authentication, and principle of least privilege ensure that employees and contractors can only access data necessary for their specific responsibilities.
• Network Security: Firewalls, intrusion detection systems, DDoS protection, and regular security monitoring protect our infrastructure from external threats and unauthorized access attempts.
• Regular Audits: phaa Casino conducts regular internal security audits, vulnerability assessments, and penetration testing to identify and remediate security weaknesses. Independent third-party security firms periodically review our systems and practices.
• Employee Training: All personnel with access to personal data receive mandatory training on data protection principles, security best practices, and regulatory compliance requirements.
• Incident Response: phaa Casino maintains a documented incident response plan to detect, respond to, and recover from data breaches or security incidents. In the event of a breach affecting your personal data, we will notify you and relevant authorities in accordance with Philippine Data Privacy Act requirements.

Despite our security measures, no system can be completely secure. You also play an important role in protecting your personal information by choosing strong passwords, keeping login credentials confidential, logging out of shared devices, and promptly reporting suspicious activity to our security team.

8. Cookies and Tracking Technologies

phaa Casino uses cookies, web beacons, pixel tags, and similar technologies to enhance user experience, maintain session state, analyze platform usage, and deliver personalized content. Types of cookies we use include:

• Strictly Necessary Cookies: Essential cookies required for platform functionality including session management, authentication, security features, and maintaining preferences during your visit. These cookies cannot be disabled without affecting basic platform operation.
• Performance Cookies: Analytics cookies that collect anonymous information about how visitors use phaa Casino, including pages visited, time spent on site, error messages encountered, and other diagnostic data used to improve platform performance.
• Functionality Cookies: Cookies that remember your preferences such as language selection, currency preference, game favorites, and other customization settings to enhance user experience.
• Targeting/Advertising Cookies: Marketing cookies used to deliver relevant promotional content, track campaign effectiveness, and limit ad frequency. These cookies are only set with your consent and can be disabled through cookie preference settings.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, and receive notifications when cookies are set. Please note that disabling necessary cookies may affect platform functionality and prevent access to certain features. Disabling analytics or marketing cookies does not affect core gaming functionality.

9. Your Rights Under Philippine Data Privacy Act

As a data subject under the Philippine Data Privacy Act, you have the following rights regarding your personal information:

• Right to Information: You have the right to be informed about the collection and processing of your personal data before or at the time of collection, which we fulfill through this Privacy Policy and account registration disclosures.
• Right to Access: You may request access to personal data we hold about you and receive a copy of such data in a commonly used electronic format.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings or by contacting customer support.
• Right to Erasure/Blocking: You may request deletion or blocking of your personal data in certain circumstances, subject to legal retention requirements and legitimate business needs. Note that we cannot delete data required for regulatory compliance, dispute resolution, or fraud prevention.
• Right to Object: You have the right to object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests. You can opt out of marketing communications at any time.
• Right to Data Portability: You may request transfer of personal data you have provided to phaa Casino in a structured, commonly used, machine-readable format, or request direct transmission to another controller where technically feasible.
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission if you believe phaa Casino has violated your data protection rights.

To exercise any of these rights, contact phaa Casino's Data Protection Officer at [email protected] or through our customer support channels. We will respond to your request within fifteen (15) days and provide the requested information or action within a reasonable timeframe, typically not exceeding thirty (30) days. In complex cases, we may extend this period and will notify you of any delay.

10. International Data Transfers

phaa Casino primarily operates within the Philippines and stores personal data on servers located in the Philippines or in jurisdictions with adequate data protection standards. However, some service providers and business partners may be located outside the Philippines, which may result in international data transfers.

When personal data is transferred internationally, phaa Casino ensures appropriate safeguards are in place to protect your information in accordance with the Philippine Data Privacy Act. These safeguards may include:

• Transfers to jurisdictions recognized by the National Privacy Commission as providing adequate data protection.
• Implementation of standard contractual clauses approved by the National Privacy Commission requiring recipient entities to maintain equivalent data protection standards.
• Verification that recipient entities are certified under recognized international privacy frameworks or industry-specific security standards.
• Obtaining your explicit consent for transfers where other safeguards are not available.

11. Children's Privacy

phaa Casino services are strictly intended for individuals who are at least twenty-one (21) years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under twenty-one (21) years of age, we will immediately delete such information and close any associated account.

Parents and guardians who believe their child has provided personal information to phaa Casino should immediately contact our Data Protection Officer so we can take corrective action. We encourage parents to use parental control software and monitor their children's internet activities to prevent access to age-restricted websites including online gaming platforms.

12. Changes to Privacy Policy

phaa Casino may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through prominent notice on our website, email notification to registered users, or in-app notification for mobile users. The "Effective Date" at the top of this policy indicates when it was last revised.

Your continued use of phaa Casino services after notice of Privacy Policy changes constitutes acceptance of the updated policy. If you do not agree with changes to the Privacy Policy, you should discontinue use of phaa Casino services and request account closure. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or phaa Casino's data protection practices, please contact our Data Protection Officer:

• Email: [email protected]
• Customer Support: Available 24/7 via live chat on phaa.cam
• Response Time: Privacy inquiries are typically addressed within fifteen (15) business days

If you are not satisfied with our response to your privacy concerns, you may file a complaint with the National Privacy Commission:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center, Vicente Sotto St., Pasay City, Metro Manila 1300
• Email: [email protected]
• Hotline: (+63 2) 8234-2228