phlcash Privacy Policy

This Privacy Policy is issued by phlcash ("phlcash," "we," "us," or "our"), the operator of the online gaming and casino platform accessible at https://phlcash.app (the "Platform"). phlcash acts as the data controller in respect of the personal data of all registered players and visitors to the Platform.

As a data controller, phlcash determines the purposes and means by which your personal data is processed. We are committed to handling your personal information responsibly, transparently, and in full compliance with the Republic Act No. 10173 (Data Privacy Act of 2012) and the implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all personal data collected through the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and your general browsing of the phlcash website.

phlcash collects personal data that falls into the following categories. We only collect data that is necessary, relevant, and proportionate to the purposes described in this policy.

2.1 Identity & Registration Data

When you create a phlcash account, we collect your full legal name, date of birth, gender, nationality, and a copy of a valid Philippine government-issued identification document (such as a PhilSys National ID, passport, driver's license, SSS ID, GSIS ID, or PRC ID). This data is required to verify your identity, confirm your eligibility to use the Platform, and comply with Know Your Customer (KYC) obligations.

2.2 Contact Data

We collect your email address, mobile phone number, and residential address (including city, province, and postal code). This information is used to communicate with you about your account, process transactions, and send service-related notifications.

2.3 Financial Data

To process deposits and withdrawals, phlcash collects payment-related information including your GCash mobile number, PayMaya account details, or bank account information (account name, account number, and bank name for BDO, BPI, Metrobank, or UnionBank). phlcash does not store full card numbers or CVV codes. Payment processing is handled by regulated third-party payment providers.

2.4 Transaction & Gaming Data

We maintain records of all financial transactions on your account (deposits, withdrawals, bonuses) and all gaming activity (bets placed, games played, outcomes, session durations). This data is required for regulatory compliance, dispute resolution, and responsible gaming monitoring.

2.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers. We also collect data about your session activity such as pages visited, time spent, and click patterns.

phlcash collects your personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated collection: Technical and device data collected automatically when you access the Platform via cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from anti-fraud partners; payment confirmation data from GCash, PayMaya, and banking partners;
• Publicly available sources: In limited circumstances, phlcash may verify information against publicly available records to confirm identity or detect fraud.

phlcash uses your personal data for the following purposes:

4.1 Account Management

To create and maintain your phlcash account, verify your identity, authenticate your login sessions, and manage your account settings and preferences.

4.2 Service Delivery

To provide access to all games and features on the Platform, process your bets and wagers, calculate and credit winnings, and deliver the core gaming experience you signed up for.

4.3 Financial Processing

To process deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and UnionBank; to maintain accurate financial records; and to comply with anti-money laundering (AML) reporting obligations under Philippine law.

4.4 Regulatory Compliance

To fulfill our obligations under applicable Philippine gaming regulations, including PAGCOR requirements, the Data Privacy Act of 2012, and the Anti-Money Laundering Act (AMLA). This includes maintaining transaction records, conducting KYC checks, and reporting to regulatory authorities as required.

4.5 Responsible Gaming

To monitor gaming patterns and identify players who may be at risk of problem gambling; to enforce deposit limits, cooling-off periods, and self-exclusion requests; and to comply with responsible gaming obligations.

4.6 Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, collusion, and other prohibited conduct on the Platform.

4.7 Customer Support

To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 live chat and email support channels.

4.8 Marketing Communications

To send you promotional offers, bonus notifications, and news about new games or features — but only if you have opted in to receive marketing communications. You may withdraw your consent at any time by updating your account preferences or contacting our support team.

Under the Data Privacy Act of 2012, phlcash processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and deliver gaming services;
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and PAGCOR regulatory requirements;
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phlcash does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Payment Processors

We share necessary financial data with payment service providers including GCash (G-Xchange, Inc.), PayMaya (PayMaya Philippines, Inc.), and partner banks (BDO, BPI, Metrobank, UnionBank) to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.

6.2 Identity Verification Partners

To fulfill KYC obligations, phlcash may share your identity documents and personal details with regulated third-party identity verification service providers. These providers process your data solely for verification purposes and are contractually prohibited from using it for any other purpose.

6.3 Technology & Infrastructure Providers

phlcash uses third-party cloud hosting, database management, and cybersecurity service providers to operate the Platform. These providers act as data processors on our behalf and are bound by data processing agreements that restrict their use of your data to the services they provide to phlcash.

6.4 Game Content Providers

Some games on the phlcash Platform are provided by third-party game studios. These providers may receive limited technical data (such as session tokens and bet amounts) necessary to deliver the game experience. They do not receive your full personal profile.

6.5 Regulatory & Law Enforcement Authorities

phlcash may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine authorities where required by law, court order, or regulatory directive.

phlcash uses cookies and similar tracking technologies to operate the Platform, improve your experience, and analyze usage patterns. A cookie is a small text file stored on your device when you visit a website.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential or security cookies may prevent you from logging in or using certain features of the phlcash Platform. Refer to your browser's help documentation for instructions on managing cookie preferences.

phlcash retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and AML obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act;
• Gaming activity records: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Customer support records: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent as evidence of compliance.

Upon expiry of the applicable retention period, phlcash will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

phlcash implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• AES-256 encryption for sensitive data stored in our databases, including identity documents and financial records;
• Multi-factor authentication (MFA) options for player accounts to prevent unauthorized access;
• Role-based access controls ensuring that phlcash staff can only access personal data necessary for their specific job functions;
• Regular security audits and penetration testing conducted by independent cybersecurity specialists;
• 24/7 security monitoring with automated alerts for suspicious activity patterns;
• Secure data centers with physical access controls, redundant systems, and disaster recovery capabilities.

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by phlcash:

Right to Be Informed

You have the right to be informed about how phlcash collects, uses, and processes your personal data. This Privacy Policy fulfills that obligation.

Right to Access

You may request a copy of all personal data phlcash holds about you, including information about how it is being used and with whom it has been shared. Requests will be fulfilled within 15 business days.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account information directly through your account settings, or contact our support team for assistance with more complex corrections.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that erasure requests may be declined where retention is required by law or regulation.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though phlcash may continue processing where there are compelling legitimate grounds that override your interests.

Right to Data Portability

Where technically feasible, you may request a copy of your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.

Right to Lodge a Complaint

If you believe phlcash has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact details for the NPC are available on their official website.

The phlcash Platform is strictly intended for individuals who are 21 years of age or older, in accordance with applicable Philippine gaming regulations. phlcash does not knowingly collect personal data from individuals under the age of 21.

During registration, all users are required to confirm their date of birth and provide a valid government-issued ID. Accounts found to belong to individuals under 21 will be immediately suspended and any personal data associated with such accounts will be deleted in accordance with applicable law.

phlcash primarily processes and stores personal data within the Philippines. In limited circumstances, data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international game content studios.

Where such cross-border transfers occur, phlcash ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law;
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission;
• Your explicit consent where required by applicable law.

phlcash will not transfer your personal data to jurisdictions that do not provide adequate data protection safeguards without your prior informed consent.

phlcash reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email and/or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the phlcash Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We recommend reviewing this Privacy Policy periodically — at least once every 90 days — to stay informed of how phlcash protects your personal data.

phlcash has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this policy, you may contact our DPO through the following channels:

All privacy-related requests must be submitted in writing (via email) and must include sufficient information to verify your identity before we can process your request. phlcash is committed to responding to all legitimate data privacy inquiries promptly and transparently.