Privacy Policy

1Data Controller

phpart is the data controller responsible for the personal data you provide when using the phpart platform. As data controller, phpart determines the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.

If you have any questions about how phpart handles your personal data, or if you wish to exercise any of your data subject rights, you may contact our Data Protection Officer (DPO) at [email protected]. Please include "Privacy / DPO Request" in the subject line of your message.

2Data We Collect

phpart collects personal data from you in the following ways and categories:

• Registration Data: When you create a phpart account, we collect your full name, date of birth, email address, mobile number, and residential address. This information is required to create and manage your account.
• Identity Verification (KYC) Data: To comply with PAGCOR regulations and Philippine anti-money laundering laws, we collect copies of your government-issued identification (e.g., PhilSys ID, passport, driver's license), proof of address, and, where required, proof of payment method ownership.
• Financial Data: We collect information about your deposits, withdrawals, and transaction history on the phpart platform. We also collect payment method details (e.g., GCash account number, bank account details) to process financial transactions. Full payment card numbers are not stored by phpart – card transactions are processed by our PCI-DSS compliant payment partners.
• Gaming Activity Data: We collect records of your gameplay on phpart, including games played, bets placed, wins and losses, session durations, and responsible gaming tool usage. This data is used to operate the platform, detect fraud, and comply with regulatory reporting requirements.
• Technical Data: We automatically collect certain technical information when you access phpart, including your IP address, device type, operating system, browser type, and session logs. This data is used for security monitoring, fraud prevention, and platform optimization.
• Communications Data: We retain records of your communications with phpart's support team, including live chat transcripts and email correspondence, for quality assurance and dispute resolution purposes.
• Marketing Preferences: If you opt in to marketing communications, we record your preferences and the communications we have sent you.

3How We Use Your Data

phpart uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your phpart player account, including processing deposits and withdrawals.
• Identity Verification: To verify your identity and age (21+) in compliance with PAGCOR KYC requirements and Philippine anti-money laundering regulations.
• Service Delivery: To provide you with access to phpart's games, promotions, and customer support services.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the phpart platform.
• Regulatory Compliance: To comply with our obligations under PAGCOR regulations, the Philippine Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable laws.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Platform Improvement: To analyze usage patterns and improve the phpart platform, including game offerings, user interface, and payment processing.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about phpart – but only if you have opted in to receive such communications.

4Legal Basis for Processing

phpart processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you (the phpart Terms & Conditions), including account management, payment processing, and service delivery.
• Legal Obligation: Processing is necessary to comply with our legal obligations under PAGCOR regulations, AMLA, and other applicable Philippine laws.
• Legitimate Interests: Processing is necessary for phpart's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your data protection rights.
• Consent: For marketing communications and certain non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time.

5Sharing Your Data

phpart does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard payment processing partners, to facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged by phpart to assist with regulatory compliance.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulatory directive.
• IT Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged by phpart to operate and maintain the platform. All such providers are bound by data processing agreements that require them to protect your data.
• Professional Advisors: Legal, accounting, and auditing firms engaged by phpart, subject to professional confidentiality obligations.

All third parties with whom phpart shares personal data are required to process that data in accordance with applicable Philippine data protection law and phpart's data protection standards.

6Data Retention

phpart retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active Accounts: Personal data is retained for the duration of your phpart account and for a period of at least five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and Philippine AMLA obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years after the end of the business relationship, as required by AMLA.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years.
• Marketing Data: Marketing preference data is retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

When personal data is no longer required, phpart will securely delete or anonymize it in accordance with our data retention and disposal procedures.

7Data Security

phpart implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and the phpart platform.
• AES-256 encryption for sensitive data stored in phpart's databases.
• Multi-factor authentication for phpart staff accessing systems that process personal data.
• Regular security audits and penetration testing of the phpart platform.
• Strict access controls ensuring that only authorized phpart personnel can access personal data, on a need-to-know basis.
• 24/7 security monitoring and intrusion detection systems.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phpart will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.

8Cookies & Tracking Technologies

phpart uses cookies and similar tracking technologies on the phpart platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use the platform.

• Strictly Necessary Cookies: Required for the phpart platform to function. These cannot be disabled. They include session cookies that keep you logged in and security cookies that protect against fraud.
• Functional Cookies: Remember your preferences (e.g., language, display settings) to improve your phpart experience.
• Analytics Cookies: Help phpart understand how players use the platform so we can improve it. Analytics data is aggregated and anonymized where possible.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content. You can opt out at any time through your account settings.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the phpart platform.

9Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phpart:

• Right to be Informed: The right to be informed about how your personal data is collected and processed – which this Privacy Policy fulfills.
• Right of Access: The right to request a copy of the personal data phpart holds about you.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data phpart holds about you.
• Right to Erasure: The right to request deletion of your personal data, subject to phpart's legal retention obligations under PAGCOR regulations and AMLA.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phpart has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." phpart will respond to all verified requests within fifteen (15) business days in accordance with NPC guidelines. We may need to verify your identity before processing your request.

10Minors & Age Verification

The phpart platform is strictly intended for persons who are 21 years of age or older. phpart does not knowingly collect personal data from persons under 21 years of age. Age verification is a mandatory step in the phpart registration and KYC process.

If phpart discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data collected, and return any deposited funds in accordance with our Terms & Conditions. If you believe that a minor has registered on the phpart platform, please contact us immediately at [email protected].

11Changes to This Privacy Policy

phpart reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, phpart will notify registered players via email or a prominent notice on the platform at least seven (7) days before the changes take effect.

The date of the most recent revision is indicated at the top of this page. Your continued use of the phpart platform after the effective date of any revision constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how phpart protects your personal data.

12Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or phpart's data processing practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.