Privacy Policy – phmanila Online Casino

1. Introduction

phmanila ("phmanila", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at phmanila.vip. This Privacy Policy ("Policy") has been prepared in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).

This Policy applies to all personal information collected by phmanila in connection with the registration, use, and closure of phmanila accounts; participation in any game or promotion offered through the phmanila platform; use of phmanila's customer support services; and browsing of the phmanila.vip website.

By creating a phmanila account, accessing phmanila's services, or continuing to use phmanila after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent, you must discontinue use of phmanila immediately.

2. Personal Data We Collect

2.1 Registration and Account Data

When you create a phmanila account, we collect the following information:

• Full legal name (as appearing on a Philippine government-issued ID);
• Date of birth (for age verification — 21+ requirement);
• Philippine mobile number (primary identifier and OTP delivery channel);
• Email address (for account notifications and support);
• Residential address in the Philippines;
• Username and encrypted password credentials.

2.2 Identity Verification (KYC) Data

To comply with PAGCOR's Know Your Customer requirements and the Anti-Money Laundering Act, phmanila may collect copies of government-issued identification documents such as your Philippine passport, SSS UMID, PhilSys national ID, driver's license, or PRC ID. We may also collect a selfie photograph for biometric liveness verification purposes.

2.3 Financial and Transaction Data

phmanila collects information about deposits, withdrawals, and in-game wagers, including: GCash or Maya account numbers associated with transactions; bank account details (BPI, BDO, Metrobank) provided for withdrawal; transaction amounts in Philippine Peso (PHP); and payment method identifiers.

2.4 Gaming Activity Data

We collect detailed records of your gaming activity on phmanila, including: game sessions, wager amounts, win/loss outcomes, bonus claims, and sports betting slip records. This data is required by PAGCOR for regulatory reporting and is also used to deliver responsible gaming features.

2.5 Device and Technical Data

When you access phmanila, we automatically collect: IP address, device type and model, operating system, browser type, mobile network operator (Smart, Globe, DITO), session timestamps, and pages visited. This information is used for security monitoring, fraud detection, and platform optimization.

2.6 Communications Data

We retain records of communications between you and phmanila's customer support team, including live chat transcripts, email correspondence, and SMS interactions. These records are used for quality assurance and dispute resolution purposes.

3. How phmanila Uses Your Personal Data

phmanila processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your phmanila account;
• Age and identity verification: Confirming that you meet the 21+ age requirement and are eligible to use phmanila under PAGCOR regulations;
• Payment processing: Facilitating GCash deposits, Maya withdrawals, and bank transfers in PHP;
• Regulatory compliance: Meeting PAGCOR reporting obligations, Anti-Money Laundering Act requirements, and NPC data protection standards;
• Responsible gaming: Monitoring gaming patterns to identify at-risk behavior and offering appropriate support tools;
• Fraud prevention and security: Detecting and preventing unauthorized account access, bonus abuse, and financial crime;
• Customer support: Responding to inquiries, resolving disputes, and processing complaints;
• Marketing communications: Sending promotional offers and bonus notifications — only where you have provided valid consent and subject to your opt-out rights;
• Platform improvement: Analyzing aggregated, anonymized usage data to improve phmanila's products and services.

4. Legal Basis for Processing Personal Data

phmanila processes personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the phmanila Terms & Conditions (account creation, payment processing, game delivery);
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML obligations, NPC regulations, and other applicable Philippine law;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring where phmanila's interests do not override your fundamental rights;
• Consent: Processing for direct marketing communications, where you have expressly opted in and where you retain the right to withdraw consent at any time.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

phmanila shares personal data with carefully selected third-party service providers who assist in delivering the platform, including: payment processors (GCash, Maya, BancNet), game software providers, KYC and identity verification services, fraud detection and cybersecurity partners, and cloud infrastructure providers. All third-party processors are contractually bound to process your data only for specified purposes and to maintain data protection standards consistent with Philippine law.

5.2 Regulatory and Law Enforcement Authorities

phmanila is required to share personal data with PAGCOR as the licensing and regulatory authority overseeing phmanila's operations. We may also disclose data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), or law enforcement agencies where legally required or compelled by a valid Philippine court order.

5.3 No Sale of Personal Data

phmanila does not sell, rent, or trade your personal information to any third party for their independent marketing or commercial purposes. Data shared with third parties is limited to what is strictly necessary to deliver phmanila's services or meet legal obligations.

6. Cookies and Tracking Technologies

phmanila uses cookies and similar tracking technologies on phmanila.vip for the following purposes:

• Essential cookies: Required for phmanila login sessions, security tokens, and core platform functionality. These cannot be disabled without breaking core features.
• Analytics cookies: Used to measure page performance, identify technical issues, and understand how Filipino players navigate the phmanila platform — data is aggregated and anonymized.
• Functional cookies: Used to remember your language and display preferences across phmanila sessions.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of specific phmanila features. phmanila does not use third-party advertising cookies or cross-site tracking tools that share your data with advertisers.

7. Data Retention

phmanila retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years from account closure, as required by PAGCOR's operator obligations and AML regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with Philippine tax and AML record-keeping requirements;
• Gaming activity logs: Retained for three (3) years from the date of each gaming session for regulatory audit and responsible gaming purposes;
• Customer support communications: Retained for two (2) years from the date of the interaction;
• Marketing consent records: Retained for the duration of your marketing consent plus three (3) years to evidence compliance.

Upon expiry of the applicable retention period, phmanila will securely delete or anonymize personal data in accordance with NPC-approved data disposal procedures.

8. Your Privacy Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by phmanila:

To exercise any of the above rights, please contact phmanila's Data Protection Officer at the email address provided in Section 13. Requests will be responded to within fifteen (15) business days.

9. Data Security

phmanila implements technical and organizational security measures appropriate to the nature of the personal data processed and the risks involved. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and phmanila.vip;
• AES-256 encryption for personal data stored in phmanila databases;
• Multi-factor authentication requirements for phmanila administrative access;
• Continuous real-time monitoring for unauthorized access and anomalous activity;
• Regular third-party security penetration testing of the phmanila platform;
• Strict access controls ensuring phmanila staff can access personal data only on a need-to-know basis;
• Data breach response procedures aligned with NPC notification requirements (within 72 hours for reportable breaches).

Despite phmanila's security measures, no internet-based system is completely immune to risk. Players are responsible for protecting their own phmanila login credentials and should enable two-factor authentication (2FA) on their accounts.

10. Children's Privacy

phmanila does not knowingly collect personal data from individuals under 21 years of age. The phmanila platform is intended exclusively for adults who meet the PAGCOR-mandated age requirement of 21 years or older. If phmanila becomes aware that a minor has provided personal data or accessed the platform, the account will be immediately terminated and all associated personal data will be deleted.

Parents and guardians in the Philippines are encouraged to use parental controls and device management tools to prevent minors in their households from accessing the phmanila platform or the phmanila login page.

11. Cross-Border Data Transfers

phmanila may transfer personal data to service providers and game studios located outside the Philippines, including in Singapore, Malta, and other jurisdictions. Where such transfers occur, phmanila ensures that adequate data protection safeguards are in place, including contractual data processing agreements that impose obligations equivalent to Philippine data protection standards.

All cross-border data transfers involving the personal data of Filipino players are conducted in accordance with Section 21 of the Data Privacy Act of 2012 and the NPC's rules on cross-border data flows.

12. Changes to This Privacy Policy

phmanila reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or phmanila's data processing practices. Material changes will be communicated to registered phmanila players via the mobile number or email address associated with their account at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of phmanila following the effective date of any changes constitutes acceptance of the revised Privacy Policy.

13. Contact – Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or the exercise of your data privacy rights, please contact phmanila's Data Protection Officer:

For regulatory escalations, the National Privacy Commission of the Philippines may be contacted through official NPC channels.