phcas Privacy
Policy & Data Protection

phcas ("we", "us", "our") operates the online casino and sports betting platform accessible at phcas.bet and is the data controller responsible for your personal information collected through this platform. We are deeply committed to protecting the privacy and security of every Filipino player who chooses to play with us — from Manila and Makati to Cebu, Davao, and beyond.

This Privacy Policy ("Policy") describes in full detail how phcas collects, receives, uses, stores, processes, discloses, transfers, retains, and disposes of personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the policies and issuances of the National Privacy Commission (NPC) of the Philippines.

By accessing or using the phcas platform — whether you are registering a new account, making a deposit, placing a bet, participating in a promotion, contacting customer support, or simply browsing the website — you acknowledge that you have read and understood this Privacy Policy and you consent to the collection, processing, and use of your personal data in the manner described herein.

This Policy should be read together with the phcas Terms & Conditions available at /terms-conditions, which also form part of the binding agreement between you and phcas.

phcas collects personal data that is adequate, relevant, and limited to what is necessary for the specific purposes for which it is processed. The categories of personal data we collect are described below:

phcas collects personal data through the following channels and methods:

• Direct Registration: When you create a phcas account, you voluntarily provide your identity and contact information through the registration form.
• KYC Verification Submissions: When you submit identity documents (e.g., Philippine Passport, SSS Card, PhilSys ID, Driver's License) in response to a verification request from phcas.
• Financial Transactions: Your payment method details are captured when you initiate a deposit or withdrawal through GCash, Maya, QR Ph, bank transfer, or any other supported Philippine payment channel.
• Platform Activity: Your gaming behaviour, betting patterns, session activity, and platform interactions are automatically recorded by phcas systems during your use of the platform.
• Device and Technical Data: Automatically collected by phcas servers when you access the platform — including your IP address, device identifiers, browser fingerprint, and connection metadata.
• Cookies and Tracking Technologies: As described in Section 7 of this Policy, phcas uses cookies and similar technologies to collect usage data when you browse phcas.bet.
• Customer Support Interactions: Any information you share with our support team through live chat or email is collected and retained for service and compliance purposes.
• Third-Party Verification Providers: Where necessary for identity or age verification, phcas may receive supplementary data from authorised third-party identity verification service providers.

phcas processes your personal data only when a valid legal basis exists under the Data Privacy Act of 2012 and its Implementing Rules. For each processing activity, at least one of the following legal bases applies:

• Consent: Where you have given clear and specific consent to the processing of your personal data for one or more specific purposes — for example, consenting to receive promotional communications from phcas at the time of registration.
• Contractual Necessity: Processing is necessary for the performance of the contract between you and phcas — specifically, the provision of the online gaming and betting services described in the phcas Terms & Conditions. This covers account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing is necessary for phcas to comply with applicable Philippine laws — including the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and PAGCOR regulatory requirements. This includes mandatory KYC identity verification, transaction monitoring, and reporting obligations.
• Legitimate Interests: Processing is necessary for the purposes of phcas's legitimate business interests — such as fraud detection and prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.

phcas uses the personal data we collect strictly for the purposes described below. We do not use your personal data for any purpose that is incompatible with these stated purposes without first obtaining your additional consent or establishing a fresh legal basis.

• Account Creation and Management: To register your phcas account, verify your identity and age (21+ requirement), manage your account settings and preferences, and maintain accurate account records.
• Payment Processing: To process your deposits and withdrawal requests through your chosen Philippine payment method, verify ownership of payment instruments, and maintain accurate financial records for audit and compliance purposes.
• Service Delivery: To provide you with access to all phcas gaming services — including slots, live dealer games, table games, Dragon Tiger Luck, Queen of Bounty, bingo, and sports betting markets.
• Fraud and Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited activities on the phcas platform.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling, enforce deposit and session limits you have set, facilitate self-exclusion requests, and support our obligation to promote responsible gaming under PAGCOR regulatory standards.
• Legal and Regulatory Compliance: To fulfil phcas's obligations under Philippine law, including Anti-Money Laundering Act (AMLA) reporting, PAGCOR regulatory compliance, tax obligations, and responding to lawful requests from Philippine government authorities.
• Customer Support: To respond to your support enquiries, resolve disputes, and improve the overall quality of our customer service.
• Marketing Communications: Where you have given consent, to send you promotional offers, bonus notifications, and updates about new phcas games and features. You may opt out of marketing communications at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how Filipino players interact with phcas and to improve the performance, design, and feature set of the platform.

phcas does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your personal data only in the limited circumstances described below, and only to the extent necessary for each stated purpose:

• Payment Service Providers: We share necessary financial and identity data with Philippine payment processors and e-wallet operators (such as GCash, Maya, GrabPay, BPI, BDO, Metrobank, and InstaPay-connected institutions) to process your transactions securely.
• Identity Verification Providers: We share identity document data with authorised KYC/AML service providers to verify your identity in compliance with Philippine regulatory requirements.
• Gaming Software Providers: Game providers whose titles are hosted on the phcas platform may receive necessary session and bet data to deliver and maintain the game experience.
• Regulatory and Law Enforcement Authorities: phcas will disclose personal data to the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), or other competent Philippine authorities when required by law, court order, or regulatory directive.
• Fraud Prevention Networks: We may share data with industry fraud prevention services to identify and block patterns of fraudulent activity that could harm Filipino players or the integrity of the phcas platform.
• Professional Advisers: Our legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis under binding professional confidentiality obligations.

phcas uses cookies and similar tracking technologies (such as web beacons and local storage) on the phcas.bet website to enhance your user experience, ensure platform security, and gather analytics data. A cookie is a small text file that is placed on your device when you visit a website.

phcas uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the phcas platform to function correctly. These cookies enable core features such as secure login sessions, account authentication, and fraud prevention. They cannot be disabled without breaking platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use the phcas platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data helps us improve platform performance.
• Functionality Cookies: These cookies remember your preferences (such as language settings, responsible gaming limits, and display preferences) to personalise your phcas experience.
• Session Security Cookies: Used to protect your phcas account session from hijacking, cross-site request forgery (CSRF), and other security threats.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phcas platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.

phcas retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements under Philippine law.

The following general retention periods apply to key categories of data:

• Account and Identity Data: Retained for the duration of your active phcas account and for a minimum of 5 years following account closure, as required for AML compliance and regulatory audit purposes under Philippine law.
• Financial and Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with AMLA record-keeping requirements.
• Gaming History: Retained for a minimum of 3 years from the date of each gaming session, for responsible gaming monitoring and dispute resolution purposes.
• Customer Support Communications: Retained for 2 years from the date of last interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance record-keeping.
• Technical and Log Data: Retained for 12 months from the date of collection, after which anonymised or aggregated summaries may be retained indefinitely for analytics purposes.

When retention periods expire, personal data is securely deleted or irreversibly anonymised in accordance with NPC-compliant data disposal procedures. In some cases, legal proceedings, regulatory investigations, or ongoing disputes may require phcas to retain certain data beyond the standard retention periods described above.

phcas takes the security of your personal data extremely seriously and has implemented a comprehensive set of technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Our data security measures include, but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the phcas platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Look for the padlock icon in your browser address bar when using phcas.bet.
• Data Encryption at Rest: Sensitive personal data stored in phcas databases — including identity documents and financial data — is encrypted at rest using strong encryption standards.
• Access Controls: Access to systems containing personal data is strictly limited to authorised phcas personnel who require access to perform their job functions. All staff with data access undergo regular data privacy training.
• Two-Factor Authentication (2FA): phcas offers 2FA for all player accounts and requires 2FA for all internal staff system access to prevent unauthorised logins.
• Penetration Testing: phcas engages independent security specialists to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Security Incident Response: phcas maintains a formal data breach response plan. In the event of a personal data breach affecting your rights and freedoms, phcas will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay as required under RA 10173.
• Secure Payment Processing: phcas does not store full payment credentials. All payment transactions are processed through PCI-DSS compliant payment gateways.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phcas. You may exercise any of these rights by contacting our Data Protection Officer at [email protected]:

• Right to Be Informed: You have the right to be informed about how phcas collects, uses, and processes your personal data — which is the primary purpose of this Privacy Policy.
• Right to Access: You have the right to request a copy of the personal data phcas holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that phcas correct any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to Erasure (Right to be Forgotten): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed — subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data where phcas relies on legitimate interests as the legal basis, or where processing is for direct marketing purposes.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit it directly to another data controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you believe phcas has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.

phcas will respond to all verified data rights requests within 30 days of receipt. We may request proof of identity before processing your request to ensure the security of your data. Some requests may be subject to limitations where legal retention obligations, fraud prevention requirements, or regulatory compliance needs apply.

If you are a parent or guardian and you believe that your child or a minor in your care has provided personal data to phcas or has accessed the phcas platform, please contact us immediately at [email protected] so that we can take prompt action to remove the data and close the account.

phcas takes underage gambling extremely seriously and enforces strict age verification procedures during the registration and KYC process, requiring all players to provide valid government-issued Philippine identification confirming they are 21 years of age or older before their account is fully activated and gameplay is permitted.

The phcas platform may occasionally contain references or links to third-party websites, services, or resources for informational purposes — such as links to PAGCOR's official website or the National Privacy Commission. phcas has no control over the content, privacy practices, or data handling policies of these external sites, and this Privacy Policy does not apply to any third-party website you may access via such links.

We encourage you to review the privacy policy of any third-party website you visit before providing any personal data. phcas accepts no responsibility or liability for the privacy practices of any third-party websites or services linked from the phcas platform.

phcas reserves the right to update, revise, or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine laws and regulations, NPC guidance, or the features and services available on the phcas platform.

When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page and in the Table of Contents sidebar.
• Display a prominent notice on the phcas platform homepage and/or within the player account dashboard informing you of the change.
• Where required by law or where the change materially affects your rights, send a direct notification to your registered phcas email address before the changes take effect.

Your continued use of the phcas platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not agree to the updated Policy, you must cease using the phcas platform and may request account closure by contacting our support team.

We encourage all Filipino players to review this Privacy Policy periodically to stay informed about how phcas protects your personal data. The version of this Policy currently published at phcas.bet/privacy-policy supersedes all previous versions.

phcas has appointed a Data Protection Officer (DPO) in accordance with the requirements of Republic Act No. 10173 and NPC regulations. If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your personal data by phcas, please contact our DPO using any of the following channels:

• Email (Primary Contact): [email protected] — use subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 directly within the phcas platform at phcas.bet — average response time under 5 minutes for urgent account security concerns.
• Written Correspondence: Addressed to "Data Protection Officer, phcas" — include your registered account email and a brief description of your request or concern.

Our DPO and privacy team aim to acknowledge all data privacy enquiries within 24 hours and to provide a full written response within 30 calendar days of receiving a complete and verified request. For complex requests that require additional time, we will notify you of the expected extended timeline within the initial 30-day window.

If you are not satisfied with phcas's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC handles complaints from Filipino data subjects and can be reached through the official NPC website and channels.