phcasg Privacy Policy

1. Overview

This Privacy Policy ("Policy") describes how phcasg ("we," "us," or "our") collects, uses, discloses, and safeguards the personal information of users ("you," "Player," or "User") who access or use the phcasg platform, including the website at phcasg.net and all associated services, games, and features (collectively, the "Platform").

phcasg is committed to protecting your privacy in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC). By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions, which govern your use of the phcasg Platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, phcasg acts as the personal information controller in respect of the personal data collected through the Platform. phcasg is responsible for determining the purposes and means of processing your personal information.

If you have any questions or concerns about how phcasg handles your personal data, or if you wish to exercise any of your data subject rights, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

3. Data We Collect

phcasg collects personal data from you in the following ways: directly from you when you register or use the Platform, automatically through your use of the Platform, and from third parties such as payment processors and identity verification services.

3.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, gender, nationality, Philippine mobile number, email address, and chosen username.
• Identity verification (KYC) documents: Government-issued ID (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's license), proof of address, and selfie verification images.
• Financial data: GCash account number, PayMaya/Maya account details, bank account information (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), and debit card details where applicable.
• Communications: Messages sent to phcasg support via live chat, email, or any other communication channel.
• Responsible gaming preferences: Deposit limits, session time limits, self-exclusion requests, and cooling-off period settings.

3.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, session duration, click patterns, search queries within the Platform, and feature interactions.
• Transaction data: Deposit and withdrawal history, game wager history, bonus usage, and account balance changes.
• Location data: General geographic location derived from your IP address, used for regulatory compliance and fraud prevention.
• Cookie and tracking data: As described in Section 9 of this Policy.

3.3 Information from Third Parties

• Identity verification results from KYC service providers.
• Payment confirmation and fraud screening data from payment processors (GCash, PayMaya, banks).
• Self-exclusion status from PAGCOR or recognized responsible gaming registries.

4. How We Use Your Data

phcasg uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and manage your phcasg player account, including authentication and account security.
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver the features and functionality of the Platform.
• Identity verification and KYC compliance: To verify your identity, confirm your age (21+), and comply with PAGCOR's Know Your Customer requirements and anti-money laundering obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct.
• Regulatory compliance: To fulfill our obligations under Philippine law, PAGCOR regulations, and the Data Privacy Act of 2012, including record-keeping and reporting requirements.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To monitor gaming behavior, enforce self-exclusion and limit settings, and identify players who may need responsible gaming support.
• Platform improvement: To analyze usage patterns, conduct internal research, and improve the features, performance, and user experience of phcasg.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest to do so. You may opt out at any time.
• Legal claims: To establish, exercise, or defend legal claims arising from your use of the Platform.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phcasg processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to when registering your phcasg account, including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, anti-money laundering laws, and the Data Privacy Act of 2012.
• Legitimate interests: Processing necessary for phcasg's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing & Disclosure

phcasg does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Service Providers

phcasg engages trusted third-party service providers to assist in operating the Platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, Philippine banks), cloud hosting and infrastructure providers, customer support platform providers, and analytics service providers. These providers are contractually bound to process your data only on phcasg's instructions and in accordance with applicable data protection laws.

6.2 Regulatory Authorities

phcasg may disclose your personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other Philippine government authorities where required by law, court order, or regulatory directive.

6.3 Responsible Gaming Registries

Where required by PAGCOR regulations or at your request, phcasg may share relevant data with responsible gaming self-exclusion registries to enforce exclusion orders and protect vulnerable players.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phcasg's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance where practicable.

7. Data Retention

phcasg retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and anti-money laundering regulations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• KYC documents: Retained for the duration of your account and for five (5) years after account closure or the completion of any related investigation, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

When your personal data is no longer required for the purposes for which it was collected, phcasg will securely delete or anonymize it in accordance with our data disposal procedures.

8. Data Security

phcasg implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and phcasg.net.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Strict access controls ensuring that only authorized phcasg personnel can access personal data, on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform.
• Two-factor authentication (2FA) options for player accounts to prevent unauthorized access.
• Secure payment tokenization — phcasg does not store full payment credentials on its servers.
• Employee training on data protection and information security best practices.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that poses a risk to your rights and freedoms, phcasg will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

9. Cookies & Tracking Technologies

phcasg uses cookies and similar tracking technologies on phcasg.net to ensure the Platform functions correctly, to remember your preferences, and to understand how players use the site. The types of cookies we use include:

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phcasg Platform. phcasg does not use third-party advertising cookies or behavioral tracking cookies for external ad targeting.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phcasg:

• Right to be informed: You have the right to know what personal data phcasg collects about you and how it is processed — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data phcasg holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: You may request that phcasg provide your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: If you believe phcasg has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. phcasg will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.

11. Minors & Age Restriction

phcasg employs age verification measures during the registration process to prevent minors from accessing the Platform. If phcasg discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and report the incident as required by applicable regulations.

If you are a parent or guardian and believe that a minor has registered on phcasg without your knowledge, please contact our support team immediately so we can take appropriate action.

12. International Data Transfers

phcasg primarily stores and processes personal data within the Philippines. In certain circumstances, your data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or KYC verification services operating in other jurisdictions.

Where such transfers occur, phcasg ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses consistent with the requirements of the Philippine Data Privacy Act of 2012 and the standards set by the National Privacy Commission. phcasg will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or without implementing appropriate protective measures.

13. Changes to This Privacy Policy

phcasg reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how phcasg protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by phcasg, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. For more information, visit the NPC's official channels.