Privacy Policy

phparm ("we", "us", "our", "Company", "Platform") is the data controller responsible for personal data collected through the phparm website at phparm.org and any associated services. phparm operates as a PAGCOR-regulated online gaming platform and processes personal data in the Philippines in accordance with applicable Philippine law.

For all privacy-related enquiries, requests, and complaints, you may contact phparm's designated Data Protection Officer (DPO) at: [email protected] with the subject line "Data Privacy Request — [Your Account Username]".

phparm collects personal data through several channels — directly from you during registration, automatically through your use of the Platform, and from third parties in the course of KYC and payment processing. The categories of data we collect are described in the table below.

phparm uses your personal data for the following purposes:

• Account Registration & Management: To create and maintain your phparm account, verify your identity, and provide you with access to Platform services.
• KYC & Regulatory Compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and applicable Philippine laws that require identity verification and transaction monitoring.
• Payment Processing: To process your GCash, Maya, BPI, BDO, or Metrobank deposits and withdrawals, and to maintain accurate financial records.
• Gaming Services: To provide, operate, and improve the games, live dealer tables, virtual sports, bingo, and other services available on phparm.
• Account Security: To detect and prevent unauthorized access, fraud, money laundering, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, complaints, and support requests in a timely and accurate manner.
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools, including deposit limits and self-exclusion, in compliance with PAGCOR requirements.
• Platform Improvement: To analyze aggregated, anonymized usage data for the purpose of improving Platform performance, user experience, and game offerings.
• Legal Obligations: To comply with court orders, regulatory requests from PAGCOR, AMLC, NPC (National Privacy Commission), or other competent Philippine authorities.

Under the Philippine Data Privacy Act of 2012, phparm processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the phparm Terms & Conditions contract you entered into upon account registration — including account management, payment processing, and gaming service delivery.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA, and other applicable Philippine laws — including KYC verification, transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing necessary for phparm's legitimate interests, including fraud prevention, Platform security, and abuse detection, where such interests are not overridden by your privacy rights.
• Consent: Processing for purposes not covered by the above bases, such as optional marketing communications, will be conducted only with your explicit prior consent, which you may withdraw at any time.

phparm does not sell, rent, or trade your personal data. We share your personal data only in the following limited circumstances:

• PAGCOR: As the licensing and regulatory authority for phparm's Philippine gaming operations, PAGCOR may require access to certain account and transaction data as part of its regulatory oversight function.
• AMLC (Anti-Money Laundering Council): phparm is required by law to report suspicious transactions to the AMLC. Such disclosures are made in compliance with the AMLA and its implementing rules.
• Payment Processors: GCash, Maya, and Philippine bank partners receive the minimum data necessary to process your financial transactions. These providers are contractually bound to process data only for payment purposes.
• KYC Service Providers: phparm may engage accredited third-party identity verification services to assist with KYC processing. Such providers are bound by data processing agreements consistent with the Philippine DPA.
• Game Providers: Certain technical session data is shared with certified game providers (e.g., JILI Gaming, PG Soft) for the purpose of delivering and auditing game outcomes. No directly identifiable personal data beyond anonymized session identifiers is shared with game providers.
• Law Enforcement: phparm will disclose personal data to law enforcement agencies when required to do so by valid Philippine legal process, court order, or other compulsory legal authority.

phparm uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit phparm.org.

• Strictly Necessary Cookies: Required for basic Platform functionality, including session authentication and security. These cannot be disabled without breaking core Platform features.
• Functional Cookies: Remember your preferences such as language, currency display, and game lobby layout to provide a more consistent experience across sessions.
• Analytics Cookies: Collect anonymized data about how users interact with the Platform (pages visited, features used, session duration) to help phparm improve performance and usability. No personally identifiable information is contained in analytics data.
• Security Cookies: Used to detect and prevent fraudulent logins, bot activity, and account takeover attempts.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use phparm. phparm does not use third-party advertising or retargeting cookies.

phparm retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory minimum retention periods:

• Active Account Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years following account closure or the last transaction, as required by Philippine anti-money laundering regulations.
• Transaction Records: Financial transaction records are retained for a minimum of 5 years following the date of the transaction.
• Customer Support Records: Retained for 2 years following the resolution of the relevant support case, unless longer retention is required by a regulatory investigation.
• Technical Logs: Login and session logs are retained for up to 12 months for security and fraud investigation purposes.

After the applicable retention period expires and no legal hold applies, phparm will securely delete or anonymize your personal data.

phparm implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• TLS/SSL encryption for all data transmitted between your device and phparm's servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Password hashing using industry-standard algorithms — phparm staff cannot view your password in plain text.
• Two-factor authentication (2FA) available on all phparm accounts as an additional access control layer.
• Role-based access controls ensuring phparm staff can access personal data only to the extent required for their specific job functions.
• Regular security assessments and penetration testing of Platform infrastructure.
• 24/7 automated fraud detection and anomalous login monitoring.

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by phparm:

• Right to Be Informed: You have the right to be informed of how your personal data is collected and used — which this Privacy Policy fulfils.
• Right of Access: You may request a copy of the personal data phparm holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data in your phparm account.
• Right to Erasure / Right to Be Forgotten: Subject to legal retention obligations, you may request deletion of your personal data upon account closure.
• Right to Object: You may object to processing of your personal data for marketing purposes or where the processing is based on phparm's legitimate interests.
• Right to Data Portability: You may request a machine-readable copy of your personal data for the purpose of transferring it to another service.
• Right to Lodge a Complaint: If you believe phparm has violated your privacy rights, you may lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, contact phparm's Data Protection Officer at [email protected]. phparm will respond to all verified data subject requests within 30 days.

phparm strictly does not provide gaming services to persons under the age of 21 years. This minimum age requirement is mandated by PAGCOR for all Philippine online casino operators. phparm does not knowingly collect personal data from individuals under the age of 21.

If phparm becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be securely deleted (subject to any legal investigation requirements), and any deposits will be returned at phparm's discretion following investigation.

If you believe a minor has registered on phparm, please notify our Data Protection Officer immediately at [email protected].

phparm's primary data storage and processing infrastructure is located within or accessible from the Philippines. In certain limited circumstances — specifically in relation to game providers and technical service providers with infrastructure outside the Philippines — personal data may be transferred to or accessible from outside the Philippines.

Any such cross-border transfer of personal data is conducted in accordance with the requirements of Section 21 of the Philippine Data Privacy Act and NPC Circular 16-01. phparm implements appropriate safeguards including contractual data processing agreements with all third-party recipients of Philippine personal data processed outside the country.

phparm may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Material changes to this Policy — particularly those that affect how we use your personal data or your rights as a data subject — will be communicated to registered users via Platform notification or email (if provided) prior to the change taking effect. Your continued use of phparm following notification of a material change constitutes your acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or phparm's personal data processing practices, please contact:

If you are unsatisfied with phparm's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.