Privacy Policy – phpear Casino

1 Overview & Scope

This Privacy Policy applies to all personal information collected, processed, stored, and shared by phpear Casino through its website at phpear.cam, any mobile-optimised versions of the platform, and all associated services available to registered phpear account holders. It applies to all Filipino players and visitors to the phpear platform, regardless of their location within the Philippines.

phpear Casino acts as a Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012. This means phpear determines the purposes and means of processing the personal data of phpear players and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

phpear Casino operates under a license granted by the Philippine Amusement and Gaming Corporation (PAGCOR). As a PAGCOR-licensed operator, phpear is subject to specific data handling and record-keeping obligations imposed by PAGCOR regulations, which intersect with and complement the data protection obligations established under the Data Privacy Act.

1.1 Third-Party Links

The phpear platform may reference third-party service providers in the context of payment processing or game provision. phpear is not responsible for the privacy practices of third-party payment processors such as GCash or Maya, or third-party game content providers. We encourage phpear players to review the privacy policies of any third-party service they interact with independently of the phpear platform.

2 Data We Collect

phpear Casino collects personal information that is necessary, relevant, and not excessive in relation to the purposes for which it is collected — consistent with the data minimisation principle under the Data Privacy Act. The categories of personal data phpear may collect include the following:

2.1 Registration & Account Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for mandatory 21+ age verification under PAGCOR requirements)
• Philippine residential address
• Active mobile phone number (including GCash-registered numbers where applicable)
• Email address
• Username and encrypted password credentials
• Government-issued ID type and number (e.g., PhilSys, Driver's License, Passport) submitted for KYC

2.2 Financial & Transaction Data

• GCash and Maya account reference numbers (not full credentials)
• Bank account identifiers used for BPI, BDO, or Metrobank transfers
• Deposit and withdrawal transaction history, amounts, and timestamps
• Bonus and promotional credit activity records
• Betting history, game participation records, and wagering data

2.3 Technical & Usage Data

• IP address and approximate geolocation data at time of login
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the phpear platform
• Cookie identifiers and similar tracking technology data (see Section 6)
• Customer support chat logs and communication records

3 How We Use Your Data

phpear Casino processes personal data only for purposes that are compatible with the reasons for which it was originally collected. The primary purposes for which phpear uses your personal information are as follows:

• Account Management: Creating, maintaining, verifying, and securing your phpear account, including managing your phpear login credentials and session security
• Identity & Age Verification: Confirming that you meet the 21+ age requirement mandated by PAGCOR and verifying your identity in compliance with KYC obligations
• Transaction Processing: Facilitating your GCash, Maya, and bank deposit and withdrawal transactions, and maintaining accurate financial records
• Regulatory Compliance: Fulfilling phpear's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and applicable Philippine law
• Platform Security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, and other security threats to the phpear platform
• Responsible Gaming: Monitoring player activity to identify potential signs of problem gambling and providing appropriate responsible gaming interventions where warranted
• Customer Support: Responding to account queries, resolving disputes, and providing assistance to phpear players through our 24/7 support channels
• Platform Improvement: Analysing aggregated, anonymised usage data to improve phpear's games, features, and overall user experience
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to phpear players who have opted in to receive such communications

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, phpear Casino relies on the following lawful bases for processing your personal information:

• Contractual Necessity: Processing is necessary to perform phpear's contractual obligations to you as a registered player, including managing your account, processing deposits and withdrawals, and enabling access to games
• Legal Obligation: Processing is required to comply with phpear's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine law and regulations
• Legitimate Interests: Processing is necessary for phpear's legitimate interests in maintaining platform security, preventing fraud, and improving the phpear platform — provided these interests are not overridden by your data protection rights
• Consent: For marketing communications and certain analytics activities, phpear relies on your freely given, informed, and specific consent, which you may withdraw at any time

5 Data Sharing & Disclosure

phpear Casino does not sell, rent, or trade your personal information to third parties for commercial purposes. phpear may share your personal data only in the following specific and limited circumstances:

5.1 Regulatory & Legal Authorities

phpear is required to disclose certain player data to PAGCOR and other Philippine government authorities — including the Anti-Money Laundering Council (AMLC) — where legally mandated. Such disclosures are made strictly in compliance with applicable law and phpear's PAGCOR licensing obligations.

5.2 Payment Service Providers

To process your GCash, Maya, BPI, BDO, Metrobank, or other payment transactions, phpear shares the minimum necessary payment reference information with the relevant payment service provider. phpear does not share your full gaming history or sensitive personal information with payment processors beyond what is required for transaction completion and fraud prevention.

5.3 Game Content Providers

Third-party game providers whose content is licensed and offered on the phpear platform may receive anonymised session and technical data necessary for the delivery and certification of their games. phpear does not share your full identity or financial data with game providers.

5.4 IT Service Providers

phpear engages trusted technology service providers for functions including cloud hosting, cybersecurity, and customer support platform operations. All such service providers are contractually bound to handle phpear player data in accordance with the Data Privacy Act and this Privacy Policy, and are prohibited from using the data for any purposes beyond the specific services they provide to phpear.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of phpear Casino's business, player data may be transferred to the relevant successor entity. phpear will notify affected players of any such transfer and the successor entity will be bound by this Privacy Policy or a materially equivalent replacement.

6 Cookies & Tracking Technologies

phpear Casino uses cookies and similar tracking technologies to maintain your login session, remember your platform preferences, detect fraud, and understand how players use the phpear platform so we can continue to improve it. Cookies are small text files stored on your device by your browser.

6.1 Types of Cookies Used

• Essential Cookies: Required for the phpear platform to function correctly. These include session cookies that maintain your phpear login state and security cookies that protect against cross-site request forgery. These cannot be disabled without significantly impairing your use of the platform.
• Functional Cookies: Store your platform preferences such as language, display settings, and responsible gaming limit configurations set in your phpear account.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the phpear platform, which pages are visited most frequently, and which features are used. This helps phpear improve the overall experience.
• Security & Fraud Detection Cookies: Help phpear identify unusual or suspicious activity patterns that may indicate fraudulent behaviour or attempted account takeovers.

You can control or delete cookies through your browser settings. Note that disabling essential cookies will impair your ability to use the phpear platform, including maintaining your phpear login session. phpear does not currently use third-party advertising cookies.

7 Data Retention

phpear Casino retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your phpear account's active status plus a reasonable period thereafter to manage any outstanding queries, disputes, or bonus conditions
• Financial Transaction Records: Retained for a minimum of five (5) years following the transaction date, in compliance with AMLA record-keeping requirements applicable to PAGCOR-licensed operators
• KYC Documents: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR KYC and AMLA obligations
• Customer Support Records: Retained for two (2) years from the date of the final interaction, unless a longer retention period is required in connection with an ongoing dispute or legal matter
• Technical & Log Data: Retained for up to ninety (90) days for operational security purposes, after which it is anonymised or deleted

When personal data is no longer required for the purposes described above or required to be retained by law, phpear will securely delete or anonymise it in accordance with NPC-recommended data disposal practices.

8 Data Security

phpear Casino implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures are reviewed and updated regularly to remain proportionate to the risks posed to player data.

• All data transmitted between your device and the phpear platform is encrypted using industry-standard Transport Layer Security (TLS) protocols
• phpear account passwords are stored using one-way cryptographic hashing — phpear support staff cannot view your password in plain text
• Access to personal data within phpear's systems is restricted on a strict need-to-know basis, with role-based access controls and audit logging
• phpear's infrastructure is subject to regular security assessments and penetration testing by qualified security professionals
• Two-factor authentication (2FA) is available to all phpear account holders and strongly recommended as an additional layer of account security

9 Your Data Rights

Under the Data Privacy Act of 2012, registered phpear players have the following rights with respect to their personal data held by phpear Casino. You may exercise any of these rights by contacting phpear's Data Protection Officer (DPO) through the contact details set out in Section 12.

• Right to Be Informed: You have the right to be informed of the fact that your personal data is being collected and processed by phpear, the purposes of such processing, and your rights in relation to that data — which is the primary purpose of this Privacy Policy
• Right of Access: You have the right to request a copy of the personal data that phpear holds about you, along with information about how it is being used
• Right to Rectification: You have the right to request that any inaccurate or incomplete personal data phpear holds about you be corrected or completed
• Right to Erasure: You have the right to request the deletion of your personal data where there is no longer a legitimate purpose or legal basis for phpear to retain it — subject to phpear's legal retention obligations under PAGCOR and AMLA requirements
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on phpear's legitimate interests, where your individual circumstances warrant
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible
• Right to Lodge a Complaint: If you believe that phpear has not handled your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines

phpear will respond to all verifiable data rights requests within thirty (30) days of receipt, or within any shorter timeframe required by NPC regulations. Complex requests may require additional time, in which case phpear will notify you of the extended timeline and the reason for it.

10 Children's Privacy

The phpear Casino platform is strictly restricted to individuals aged twenty-one (21) years and above, as required by PAGCOR regulations governing online casino gaming in the Philippines. phpear does not knowingly collect personal data from any individual under the age of 21.

If phpear becomes aware that personal data has been collected from an individual under the age of 21 — whether through the registration process or any other means — phpear will immediately suspend the relevant account, delete all associated personal data (except to the extent retention is required for regulatory compliance purposes), and may report the matter to the appropriate authorities.

If you are a parent or guardian and believe that your child or a minor under your care has registered for a phpear account, please contact phpear's customer support team immediately so the account can be investigated and closed.

11 Amendments to This Policy

phpear Casino reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, NPC regulations, PAGCOR requirements, phpear's operational practices, or the range of services offered on the phpear platform. All amendments will be published on this page with a revised effective date.

For material changes to this Privacy Policy — particularly those that affect how phpear uses your personal data or your data rights — phpear will provide advance notice to registered phpear account holders via email or in-platform notification prior to the amendment taking effect.

Your continued use of the phpear platform following the effective date of any Privacy Policy amendment constitutes your acknowledgment of the updated Policy. If you do not agree with a material amendment, you may close your phpear account by contacting our customer support team before the amendment takes effect.

12 Contact & Data Protection Officer

phpear Casino has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-01. If you wish to exercise your data rights, raise a privacy concern, or report a suspected data breach involving your phpear account, you may contact phpear's DPO through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly through the phpear platform dashboard
• Support Ticket: Accessible from your phpear account settings panel under "Privacy & Data"

phpear aims to acknowledge all privacy-related requests within five (5) business days and to resolve them within thirty (30) days. If your concern relates to a potential data breach, phpear's security team will treat it as a priority matter and respond as promptly as possible.