Privacy Policy – phpcasino Casino

1 Who We Are

phpcasino Casino ("phpcasino", "we", "us", "our") operates the online casino platform accessible at phpcasino.vip and any associated mobile applications or services (collectively, the "Platform"). For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, phpcasino acts as the Personal Information Controller (PIC) in respect of the personal data of all registered users and visitors to the Platform.

phpcasino is committed to handling your personal data responsibly, transparently, and in accordance with all applicable Philippine data protection laws. If you have any questions about how phpcasino processes your personal data, please refer to Section 13 of this Policy for contact details.

2 Personal Data We Collect

phpcasino collects the following categories of personal data from users of the Platform. We collect only what is necessary for the purposes described in this Policy — nothing more.

2.1 Identity & Contact Data

• Full legal name (as it appears on your government-issued Philippine ID)
• Date of birth (to verify you are 21 years of age or older)
• Residential address (barangay, city/municipality, province, region)
• Valid email address
• Active Philippine mobile number (Globe, Smart, or DITO)
• Government-issued ID details (PhilSys National ID, driver's license, or passport number and expiry)

2.2 Financial Data

• GCash or PayMaya account number (for deposit and withdrawal processing)
• Philippine bank account details (for bank transfer transactions — BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank)
• Debit card details (card number, expiry — stored in tokenized form only; full card numbers are never stored on phpcasino servers)
• Transaction history (deposits, withdrawals, wager amounts, game outcomes)

2.3 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration, pages visited, and features used on the Platform
• Login timestamps and authentication logs
• Game activity logs (game titles played, bet amounts, session duration)

2.4 Communications Data

• Records of live chat conversations with phpcasino support agents
• Email correspondence with phpcasino's support or KYC teams
• Feedback, complaints, and dispute records

3 How We Collect Your Data

phpcasino collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or submitting a complaint.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 7 for details on cookies.
• Third-party sources: Identity verification data from licensed KYC service providers; transaction data from payment processors (GCash, PayMaya, Philippine banks); fraud prevention data from licensed anti-fraud service providers.
• Regulatory sources: Information received from PAGCOR, the National Privacy Commission, or other Philippine regulatory bodies in connection with compliance obligations.

4 Why We Use Your Personal Data

phpcasino uses your personal data for the following specific purposes:

5 Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), phpcasino processes your personal data on the following legal bases:

• Contract performance: Processing necessary to register your account, operate your phpcasino membership, and process financial transactions.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, KYC requirements, and National Privacy Commission directives.
• Legitimate interest: Processing for fraud prevention, platform security, and aggregated analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications and non-essential cookies, where you have given explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Third Parties

phpcasino does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

6.1 Service Providers

phpcasino engages licensed third-party service providers who process personal data on our behalf under strict data processing agreements. These include:

• KYC / Identity Verification Providers – to verify your identity and age in compliance with regulatory requirements.
• Payment Processors – GCash, PayMaya/Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process deposits and withdrawals.
• Game Software Providers – licensed game studios whose software is integrated into the phpcasino Platform, which may receive anonymized session data for game performance purposes.
• Fraud Prevention & Cybersecurity Providers – to detect and prevent unauthorized access, money laundering, and fraudulent activity.
• Cloud Infrastructure Providers – for secure hosting and data storage, operating under contractual data protection obligations.

6.2 Regulatory & Law Enforcement Authorities

phpcasino is required by Philippine law to disclose personal data to the following authorities where legally mandated:

• Philippine Amusement and Gaming Corporation (PAGCOR)
• Anti-Money Laundering Council (AMLC)
• National Privacy Commission (NPC)
• Philippine National Police (PNP) or National Bureau of Investigation (NBI) pursuant to a valid court order or lawful request

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of phpcasino's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer via email to your registered address.

7 Cookies & Tracking Technologies

phpcasino uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and display preferences. These improve your experience but are not strictly required.
• Analytics Cookies: Collect anonymized data about how users interact with the Platform — pages visited, session duration, and feature usage. This data is used in aggregate form only to improve the Platform.
• Marketing Cookies (opt-in only): Used only if you have explicitly consented to receive personalized promotional communications. You may withdraw this consent at any time through your account settings.

You can manage your cookie preferences through your browser settings or through the phpcasino cookie preference center, accessible from the footer of the Platform. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

8 Data Retention

phpcasino retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus five (5) years after account closure, in compliance with PAGCOR licensing requirements and AMLA obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act (RA 9160, as amended).
• KYC verification documents: Retained for five (5) years after account closure or the last transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last communication.
• Technical and usage logs: Retained for twelve (12) months, after which they are anonymized or deleted.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of the consent transaction.

Upon expiry of the applicable retention period, phpcasino will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures.

9 Data Security

phpcasino implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phpcasino's servers.
• AES-256 encryption at rest for all sensitive personal and financial data stored on phpcasino's infrastructure.
• Payment card tokenization — full debit card numbers are never stored on phpcasino servers; only secure tokens provided by our payment processor are retained.
• Multi-factor authentication (MFA) available for all user accounts and mandatory for all phpcasino administrative access.
• Role-based access controls ensuring that personal data is accessible only to phpcasino personnel with a legitimate need to access it.
• Regular penetration testing and security audits conducted by independent cybersecurity firms.
• Incident response procedures — in the event of a personal data breach, phpcasino will notify affected users and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by NPC Circular 16-03.

10 Your Data Protection Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by phpcasino. To exercise any of these rights, contact our Data Protection Officer (see Section 13).

phpcasino will respond to all data subject requests within thirty (30) calendar days of receipt. If your request is complex or numerous, we may extend this period by a further thirty (30) days, with prior notice. If you are not satisfied with phpcasino's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Children & Minors

The phpcasino Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. phpcasino does not knowingly collect personal data from individuals under the age of 21.

If phpcasino becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete all associated personal data, and report the matter to the appropriate regulatory authorities. Parents and guardians are strongly encouraged to use parental control software to prevent minors from accessing online gambling platforms.

12 Changes to This Privacy Policy

phpcasino may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, phpcasino will notify registered users via email to their registered address and post a prominent notice on the Platform at least seven (7) calendar days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the phpcasino Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

13 Contact & Data Protection Officer

phpcasino has appointed a Data Protection Officer (DPO) in compliance with Section 21 of the Data Privacy Act of 2012 and NPC Circular 17-01. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.