phmacoa Privacy Policy

1. Introduction

phmacoa takes its obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations seriously. We act as a personal information controller in respect of the data we collect from players and visitors to our platform.

This Policy sets out in plain terms what personal data phmacoa collects from Filipino players, the purposes for which we process that data, the legal bases that justify our processing, and the rights available to data subjects. We encourage all phmacoa users to read this Policy carefully before creating an account or submitting any personal information.

By registering a phmacoa account or using any part of our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein, where consent is the applicable legal basis.

2. Personal Data We Collect

phmacoa collects the following categories of personal data in connection with the provision of our gaming services:

phmacoa does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless specifically required by applicable law or regulatory obligation.

3. How We Use Your Personal Data

phmacoa processes your personal data for the following purposes:

• Account creation and management: To register and administer your phmacoa account, verify your identity, and enable access to our gaming services.
• Transaction processing: To process deposits and withdrawals via GCash, Maya, bank transfer, and other supported payment methods, and to maintain accurate transaction records.
• Regulatory compliance: To fulfil our obligations under Philippine anti-money laundering laws, PAGCOR-aligned regulatory requirements, and the Data Privacy Act, including KYC verification, suspicious activity monitoring, and record-keeping.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling, enforce self-exclusion requests, apply deposit and loss limits, and fulfil our duty of care obligations to Filipino players.
• Customer support: To respond to your enquiries, investigate complaints, and resolve disputes through our 24/7 support channels.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.
• Platform security: To detect, prevent, and investigate fraud, unauthorized access, cheating, collusion, and other breaches of our Terms and Conditions.
• Platform improvement: To analyze aggregated usage data, improve platform performance, and develop new features and game offerings for Filipino players.

4. Legal Basis for Processing

phmacoa processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the player account agreement, including account administration, payment processing, and service delivery.
• Legal obligation: Processing required to comply with Philippine law, including AML requirements, tax obligations, and regulatory reporting duties.
• Legitimate interests: Processing for fraud prevention, platform security, and improving phmacoa's services, provided such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and optional analytics, where we have obtained your specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Third-Party Disclosure

phmacoa does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients where necessary:

• Payment processors: GCash, Maya, BPI, BDO, and other payment service providers, solely to process your deposit and withdrawal transactions.
• Game content providers: Third-party game studios and live casino providers who supply game content on the phmacoa platform, limited to the technical data required to deliver game sessions.
• KYC and identity verification providers: Third-party identity verification services engaged to assist with document verification and AML screening.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where we are legally required to disclose information.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers engaged to support phmacoa's platform operations, under strict data processing agreements.

All third-party data processors engaged by phmacoa are contractually required to handle your data in accordance with applicable Philippine data protection law and phmacoa's security standards.

6. Data Retention

phmacoa retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: retained for the duration of your active account and for a minimum of five (5) years following account closure, as required under Philippine AML regulations.
• Transaction records: retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Gaming activity logs: retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Marketing consent records: retained for the duration of the consent period and for a minimum of one (1) year thereafter.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with phmacoa's data lifecycle management procedures.

7. Cookies and Tracking Technologies

phmacoa uses cookies and similar tracking technologies on our platform for the following purposes:

• Essential cookies: Required for the platform to function correctly, including maintaining your login session and storing your language and display preferences.
• Analytics cookies: Used to collect aggregated, anonymized data about how visitors use the phmacoa platform, helping us improve performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and multi-account prevention measures.

You may configure your browser to refuse or delete cookies. Please note that disabling essential cookies may impair your ability to log in to or use the phmacoa platform. phmacoa does not use cookies to track your activity on third-party websites.

8. Data Security

phmacoa implements technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phmacoa platform.
• Encrypted storage of passwords and other sensitive authentication credentials using industry-standard hashing algorithms.
• SMS OTP two-factor authentication available to all phmacoa accounts.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments of our platform infrastructure.
• Incident response procedures for identifying, containing, and reporting personal data breaches in accordance with the Data Privacy Act.

While phmacoa takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phmacoa login credentials and for ensuring the security of the device you use to access the platform.

9. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, registered phmacoa players have the following rights in respect of their personal data:

• Right to be informed: The right to be notified of how your personal data is collected and processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data phmacoa holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your phmacoa account.
• Right to erasure: The right to request deletion of your personal data where there is no longer a legal basis for its retention, subject to our statutory retention obligations.
• Right to object: The right to object to processing based on legitimate interests or direct marketing purposes.
• Right to data portability: The right to receive a copy of your personal data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact phmacoa's support team via live chat or at the email address listed on this site. We will respond to verified requests within thirty (30) calendar days in accordance with our obligations under Philippine law.

10. Children's Privacy and Age Restriction

The phmacoa platform is strictly intended for adults who are 21 years of age or older. phmacoa does not knowingly collect personal data from persons under the age of 21.

If phmacoa discovers or has reason to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all associated personal data will be reviewed, and the account will be permanently closed in accordance with our Terms and Conditions and our obligations under Philippine gaming regulations.

If you believe a minor has accessed phmacoa or created an account, please contact our support team immediately so that the matter can be investigated and resolved promptly.

11. Changes to This Privacy Policy

phmacoa reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes will be communicated to registered players via SMS or the notification system within their phmacoa account at least fourteen (14) days before the changes take effect.

The current version of this Policy is always accessible at phmacoa.vip/privacy-policy. The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. Your continued use of the phmacoa platform following any amendment constitutes acceptance of the updated Policy.

12. Contact and Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or phmacoa's handling of your personal data, please contact our Data Privacy Officer through the phmacoa customer support channels available on this site.

Contact email: [email protected]

If you are not satisfied with phmacoa's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.