phchas Privacy Policy

1. Scope and Application

This Privacy Policy applies to all personal data processed by phchas Entertainment Ltd. ("phchas", "we", "us", "our") in connection with the operation of the phchas online casino and sports betting platform accessible at https://phchas.net (the "Platform").

This Policy applies to all registered users ("User", "you", "your"), visitors who browse the Platform without registering, and any person who contacts phchas customer support. By using the phchas Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read alongside the phchas Terms & Conditions. In the event of any inconsistency between this Policy and the Terms & Conditions on matters of data privacy, this Privacy Policy shall prevail.

2. Personal Data We Collect

phchas collects the following categories of personal data:

phchas does not collect sensitive personal information (as defined by the Data Privacy Act) beyond what is strictly necessary for KYC compliance and identity verification purposes.

3. How We Collect Your Data

phchas collects personal data through the following channels:

• Direct submission: Information you provide when registering a phchas account, completing KYC verification, making a deposit or withdrawal, or contacting customer support.
• Automated collection: Technical data collected automatically when you access or interact with the phchas Platform, including through cookies, server logs, and session analytics tools.
• Third-party sources: Identity and fraud-check data received from PAGCOR, AMLC, payment processors (e.g., GCash, Maya), and credit reference agencies where permitted by Philippine law.

4. Legal Basis for Processing

phchas processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing necessary to perform the phchas platform contract with you — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR licensing requirements, AMLA reporting obligations, NPC data retention mandates, and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where our legitimate interests are not overridden by your data rights.
• Consent: Processing for marketing communications, where you have given explicit, freely-given, and withdrawable consent. You may withdraw marketing consent at any time via your account settings or by contacting support.

5. How We Use Your Personal Data

phchas uses your personal data for the following purposes:

• Creating and managing your phchas account.
• Processing deposits, bets, and withdrawals through GCash, Maya, and other accepted payment methods.
• Verifying your identity and age (21+) as required by PAGCOR regulations.
• Detecting and preventing fraud, money laundering, and other illegal activity, including filing Suspicious Transaction Reports (STRs) with AMLC where legally required.
• Administering bonuses, promotions, and loyalty programmes.
• Operating and improving the phchas Platform, including game personalisation and technical performance monitoring.
• Providing customer support through live chat, email, and other communication channels.
• Enforcing responsible gaming controls, including monitoring for problem gambling indicators and administering self-exclusion requests.
• Sending transactional communications (account alerts, deposit confirmations, withdrawal notifications).
• Sending promotional communications where you have consented to receive them.
• Complying with lawful requests from PAGCOR, NPC, AMLC, and other Philippine regulatory and law enforcement bodies.

6. Sharing of Personal Data

phchas does not sell your personal data. phchas may share your personal data with the following categories of recipients only where strictly necessary and in accordance with applicable Philippine law:

• Payment processors: GCash, Maya / PayMaya, and other Accepted Payment Method providers — to process deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services used to complete PAGCOR-mandated KYC checks.
• Game providers: Licensed game software providers whose games are available on the phchas Platform — limited to session and bet data required to deliver the game.
• Regulatory bodies: PAGCOR, AMLC, NPC, and other Philippine regulatory or law enforcement authorities where disclosure is required by law or valid legal process.
• Professional advisers: Legal, audit, and compliance advisers under binding professional confidentiality obligations.
• Technology service providers: Cloud hosting, cybersecurity, analytics, and customer support platform providers acting as data processors under phchas's instruction.

All third parties with whom phchas shares personal data are contractually required to process such data only in accordance with phchas's instructions and applicable Philippine data protection law.

7. Cookies and Tracking Technologies

phchas uses cookies and similar technologies on the phchas Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — including maintaining your login session and processing transactions. These cannot be disabled.
• Performance cookies: Anonymised analytics that help phchas understand how users navigate the Platform, which pages load slowly, and where errors occur. Data is aggregated and not linked to individual identities.
• Functional cookies: Remember your language preference, display settings, and responsible gaming configurations between sessions.
• Security cookies: Detect and prevent fraudulent login attempts, session hijacking, and cross-site request forgery.

phchas does not use third-party advertising or retargeting cookies. You may manage non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair Platform functionality.

8. Data Retention

phchas retains personal data for the following periods:

• Active account data: Retained for the duration of your phchas account.
• Closed account data: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and AMLA record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of collection or the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years in accordance with Philippine financial record-keeping law.
• Customer support communications: Retained for two (2) years from the date of the interaction unless a longer period is required for dispute resolution or legal proceedings.

Upon expiry of applicable retention periods, phchas will securely delete or anonymise personal data so that it can no longer be attributed to an identifiable individual.

9. Data Security

phchas implements technical and organisational security measures appropriate to the risk profile of personal data processing on the Platform, including:

• Transport Layer Security (TLS / HTTPS) for all data transmitted between your device and the phchas Platform.
• AES-256 encryption for personal and financial data at rest.
• Role-based access controls ensuring that phchas personnel can only access personal data relevant to their specific function.
• Multi-factor authentication requirements for phchas personnel with access to production data systems.
• Regular penetration testing and vulnerability scanning by independent security specialists.
• Incident response procedures for identifying, containing, and notifying affected parties of personal data breaches in accordance with NPC breach notification requirements.

No data transmission over the internet is completely secure. While phchas takes all reasonable steps to protect your data, you acknowledge that you provide personal data at your own risk. phchas will notify you and the NPC of any data breach that poses a significant risk to your rights and freedoms, within the timeframes required by Philippine law.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you hold the following rights with respect to your personal data held by phchas:

• Right to be Informed: The right to know what personal data phchas holds about you and how it is processed.
• Right of Access: The right to request a copy of the personal data phchas holds about you.
• Right to Rectification: The right to correct inaccurate or incomplete personal data. Basic account details may be updated directly in your phchas account settings.
• Right to Erasure / Blocking: The right to request deletion or blocking of personal data where processing is no longer necessary, unlawful, or where consent has been withdrawn — subject to phchas's legal retention obligations.
• Right to Object: The right to object to processing based on legitimate interests, including the right to opt out of marketing communications at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another data controller, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phchas has breached your data protection rights.

To exercise any of these rights, contact phchas at [email protected] or via the 24/7 live chat. phchas will respond to all verifiable data subject requests within thirty (30) days of receipt.

11. Children and Minors

The phchas Platform is strictly restricted to persons who are 21 years of age or older. phchas does not knowingly collect or process personal data relating to any person under the age of 21. If phchas becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately closed, all data will be securely deleted, and any deposited funds will be returned to the originating payment method following verification.

If you have reason to believe that a minor has registered a phchas account, please notify us immediately at [email protected].

12. Changes to This Privacy Policy

phchas reserves the right to update this Privacy Policy at any time to reflect changes in Philippine law, NPC guidance, PAGCOR requirements, or phchas's data processing practices. Material changes will be communicated to registered users by email and/or in-platform notification at least seven (7) days before the updated Policy takes effect.

The current version of the Privacy Policy is always accessible at https://phchas.net/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

13. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or phchas's data processing practices, please contact the phchas Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the phchas Platform at https://phchas.net

All data privacy enquiries will be acknowledged within two (2) business days and resolved within thirty (30) days. If you are not satisfied with phchas's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.