ph club Privacy Policy

1 Data Controller Identity

The data controller responsible for the personal data of players on the ph club Platform (phclub.asia) is ph club, a PAGCOR-licensed online gaming operator operating within the Republic of the Philippines ("ph club," "we," "us," or "our").

ph club is registered with the National Privacy Commission (NPC) of the Philippines as a personal information controller as required under the Data Privacy Act of 2012. Questions regarding this Privacy Policy or the exercise of data subject rights may be directed to our Data Protection Officer at [email protected].

2 Scope & Application

This Privacy Policy applies to all personal data collected, processed, stored, and used by ph club in connection with:

• Registration and maintenance of player accounts on phclub.asia;
• Real-money gaming activity including bingo, slots, live casino, and arcade games;
• Financial transactions including deposits and withdrawals via GCash, Maya, BPI, BDO, and other supported payment channels;
• Customer support interactions through live chat, email, and any other communication channel operated by ph club;
• Promotional activities, bonus campaigns, and loyalty program participation;
• Browsing and usage of the ph club Platform and all associated technical infrastructure.

This Privacy Policy does not extend to third-party websites, payment processors, or gaming content providers linked from or integrated within the ph club Platform. Players are encouraged to review the privacy policies of those third parties independently.

3 Categories of Personal Data We Collect

ph club collects personal data across the following categories, depending on the nature of your interaction with the Platform:

ph club does not intentionally collect special categories of personal data (e.g., health data, political opinions, religious beliefs) and requests that Players do not submit such information in any platform communication.

4 How We Collect Your Personal Data

ph club collects personal data through the following channels:

4.1 Direct Collection

Information you provide directly when registering a ph club account, completing KYC verification, submitting withdrawal requests, contacting customer support, or participating in promotions and surveys.

4.2 Automated Collection

Technical data collected automatically through cookies, web beacons, server logs, and similar tracking technologies as you browse and use the ph club Platform. This includes IP addresses, device identifiers, session activity, and browser behavior data.

4.3 Third-Party Sources

ph club may receive personal data from:

• Philippine payment processors (GCash, Maya, BPI, BDO, Metrobank, and others) in connection with transaction verification;
• Identity and age verification service providers engaged by ph club for KYC compliance;
• PAGCOR and other Philippine government agencies for regulatory compliance and responsible gaming purposes, including information about self-excluded individuals.

5 Purposes of Processing

ph club processes your personal data for the following specific purposes:

• Account Administration: Creating, maintaining, authenticating, and closing player accounts on the ph club Platform;
• Regulatory Compliance (KYC/AML): Verifying player identity and age as required by PAGCOR licensing conditions and the Anti-Money Laundering Act (RA 9160, as amended);
• Payment Processing: Facilitating deposits and withdrawals in Philippine Peso through authorized payment channels;
• Platform Operation: Delivering gaming services, processing wagers, calculating and crediting winnings, and maintaining accurate account records;
• Responsible Gaming: Monitoring gaming activity to identify indicators of problem gambling, applying player-requested restrictions, and maintaining self-exclusion records;
• Security and Fraud Prevention: Detecting and preventing unauthorized access, fraudulent transactions, multi-accounting, bonus abuse, and other integrity violations;
• Customer Support: Responding to player inquiries, resolving disputes, and providing technical assistance;
• Legal Obligations: Complying with PAGCOR reporting requirements, AMLC reporting obligations, NPC directives, and orders from competent Philippine courts or law enforcement agencies;
• Service Improvement: Analyzing anonymized usage data to improve Platform functionality, game selection, and user experience;
• Direct Communications: Sending transactional notifications (deposit confirmations, withdrawal status, account security alerts) and, where consent is given, promotional communications about ph club offers and games.

6 Legal Basis for Processing

ph club processes your personal data on the following legal bases under the Data Privacy Act of 2012:

7 Data Sharing & Disclosure

ph club does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and with the following categories of recipients:

7.1 Authorized Service Providers

Third-party companies engaged by ph club to perform services on our behalf, including payment processors (GCash, Maya, and banking partners), KYC and identity verification providers, cloud infrastructure and hosting providers, cybersecurity service providers, and customer support platform operators. All service providers are contractually bound to process your data solely for ph club's authorized purposes and to maintain appropriate security standards.

7.2 Regulatory and Government Authorities

ph club is required by law to disclose personal data to the following Philippine authorities when legally mandated:

• Philippine Amusement and Gaming Corporation (PAGCOR) — licensing compliance and regulatory reporting;
• Anti-Money Laundering Council (AMLC) — suspicious transaction reports and covered transaction reports as required under RA 9160;
• National Privacy Commission (NPC) — data breach notifications and compliance inquiries;
• Philippine National Police (PNP), National Bureau of Investigation (NBI), and competent Philippine courts — in response to valid legal orders, warrants, or subpoenas.

7.3 Game Content Providers

Technical game data (session identifiers, bet and win records) is shared with licensed game providers in order to operate their games on the ph club Platform. No directly identifying personal data (name, mobile number, government ID) is shared with game providers beyond what is technically necessary for game operation and dispute resolution.

8 Data Retention Periods

ph club retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to applicable legal retention obligations:

• Account and identity data: Retained for the duration of your active ph club account and for a period of five (5) years following account closure, consistent with PAGCOR recordkeeping requirements and AMLA obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML regulations;
• KYC verification documents: Retained in accordance with PAGCOR licensing requirements, typically five (5) years from the date of verification;
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution and responsible gaming purposes;
• Customer support records: Retained for two (2) years from the date of the interaction;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for compliance documentation purposes.

Upon expiry of applicable retention periods, ph club will securely delete or anonymize your personal data in accordance with NPC-approved disposal methods.

9 Security Measures

ph club implements a comprehensive set of organizational and technical security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph club servers;
• Encryption of personal data stored in ph club's databases at rest;
• Role-based access controls limiting personal data access to authorized personnel who require it for their specific job functions;
• Two-factor authentication requirements for ph club staff accessing systems containing personal data;
• Regular penetration testing and vulnerability assessments of platform infrastructure;
• Formal data breach response procedures including NPC notification protocols;
• Staff training on data privacy obligations under Philippine law and ph club's internal policies;
• Regular review and audit of security controls and access logs.

10 Cookies & Tracking Technologies

ph club uses cookies and similar tracking technologies on the Platform for the following purposes:

10.1 Essential Cookies

Strictly necessary for Platform operation — including session management, authentication state, security tokens, and load balancing. These cookies cannot be disabled without impairing core Platform functionality.

10.2 Functional Cookies

Used to remember your preferences such as language settings, notification preferences, and game display settings, enabling a more personalized Platform experience.

10.3 Analytics Cookies

Collect anonymized usage data (pages visited, features used, session duration) to help ph club understand how players use the Platform and identify areas for improvement. Analytics data is aggregated and does not identify individual players.

10.4 Cookie Management

Non-essential cookies may be declined through your browser settings. Please note that declining functional and analytics cookies may affect certain Platform features and personalization. Essential cookies cannot be declined as they are required for Platform operation.

11 Protection of Minors

ph club's services are strictly restricted to individuals who are at least twenty-one (21) years of age, consistent with PAGCOR licensing conditions and Philippine gaming regulations. ph club does not knowingly collect, process, or store personal data of individuals under 21 years of age.

If ph club discovers or has reasonable grounds to believe that personal data of a minor has been collected, the relevant account will be immediately suspended, all data will be securely deleted to the extent legally permissible, and the matter will be reported to PAGCOR as required. ph club employs mandatory age verification using government-issued Philippine identification to enforce this restriction at the point of registration.

12 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you hold the following rights in respect of your personal data processed by ph club. These rights may be exercised by contacting our Data Protection Officer at [email protected].

ph club will respond to verified data subject rights requests within fifteen (15) business days of receipt. Requests must be submitted in writing and accompanied by sufficient information to verify your identity. ph club will not process rights requests that cannot be reasonably verified to prevent unauthorized access to other players' data.

13 Cross-Border Data Transfers

ph club primarily processes and stores player personal data within the Republic of the Philippines. Where operational necessity requires the transfer of personal data to service providers or infrastructure located outside the Philippines (for example, cloud hosting infrastructure with Philippine-region availability zones or international game server networks), ph club ensures that such transfers are conducted in compliance with Section 21 of the Data Privacy Act of 2012 and applicable NPC regulations on cross-border data flows.

All third-party recipients of ph club player data located outside the Philippines are contractually required to maintain data protection standards equivalent to those required under Philippine law. ph club does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without appropriate safeguards in place.

14 Data Protection Officer

ph club has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. The DPO is the primary point of contact for data subject rights requests, privacy inquiries, and data breach notifications.

15 Amendments to This Privacy Policy

ph club reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Material changes to this Privacy Policy that affect how ph club processes your personal data will be communicated to registered players via SMS notification to your registered Philippine mobile number or email notification prior to the changes taking effect. Your continued use of the ph club Platform following notification of material changes constitutes your acknowledgment of the revised Privacy Policy.

16 Governing Law & Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as administered by the National Privacy Commission.

Any dispute arising from this Privacy Policy or ph club's data processing practices that cannot be resolved informally shall be subject to the jurisdiction of the National Privacy Commission of the Philippines as the primary regulatory authority, or, where appropriate, the competent courts of the Republic of the Philippines.

If any provision of this Privacy Policy is found to be unenforceable by a competent authority, such provision shall be deemed modified to the minimum extent necessary to make it enforceable, or severed if modification is not possible, without affecting the enforceability of the remaining provisions.